Document security management methods, terminal devices, electronic devices, media, and program products

Abstract

This application provides a method, terminal device, electronic device, medium, and program product for secure file management, applicable to the fields of large-scale modeling and fintech. The method is applied to the application programming interface (API) of a terminal device and includes: acquiring file content uploaded to the terminal device via a pre-built API; parsing the file content to obtain text data; analyzing the text data using a pre-trained large-scale model to determine the risk level of the file content; determining a matching security management strategy from a pre-defined rule base based on the risk level and the caller information of the corresponding API; and performing security management on the file content according to the security management strategy.

Description

Technical Field

[0001] This application relates to the fields of large-scale modeling and financial technology, and more specifically to a method for secure management of documents, terminal devices, electronic devices, media, and program products. Background Technology

[0002] In the open and integrated business model of commercial banks, providing secure and efficient file exchange capabilities to internet partners via APIs (Application Programming Interfaces) has become a core infrastructure for building a digital ecosystem. These API file services carry a large amount of critical business data, such as reconciliation documents, credit reports, and joint marketing materials. Simultaneously, file exchange between internal bank systems is evolving from traditional point-to-point models (such as ETRAN) to standardized API models based on open platforms. This shift, while improving efficiency and flexibility, also allows massive amounts of diverse external files to directly access the bank's core data boundaries.

[0003] However, the risks associated with the content of these external files are unknown and dynamic. Traditional solutions that rely on transmission protocol security and static identity authentication are no longer able to meet the urgent need for real-time, accurate risk identification and differentiated security control of the file content itself. Summary of the Invention

[0004] In view of the above problems, embodiments of this application provide a method for secure management of documents, a terminal device, an electronic device, a medium, and a program product.

[0005] According to a first aspect of this application, a file security management method is provided, applied to a terminal device. The method includes: acquiring file content uploaded to the terminal device through a pre-built application programming interface (API); parsing the file content to obtain text data of the file content; analyzing the text data using a pre-trained large model to determine the risk level of the file content; determining a matching security management strategy from a pre-set rule base based on the risk level and the caller information of the API corresponding to the file content; and performing security management on the file content according to the security management strategy.

[0006] According to an embodiment of this application, a terminal device has an interface gateway in front of its application programming interface (API). Obtaining file content uploaded to the terminal device through a pre-configured API includes: responding to receiving an upload request initiated by the caller to the interface gateway, the upload request representing a request to upload file content to the terminal device; verifying the signature of the upload request through the interface gateway; and obtaining the file content from the API if the signature verification is successful.

[0007] According to embodiments of this application, the text data of the file content includes first text data, second text data, and third text data; parsing the file content to obtain the text data of the file content includes: determining the type of the file content, including text type, image type, and text-image composite type; if the file content is text type, performing syntax parsing on the file content to obtain the first text data of the file content; if the file content is image type, performing optical character recognition on the image data in the file content to obtain the second text data of the file content; if the file content is text-image composite type, calling a preset parsing library to parse the file content to obtain the third text data of the file content.

[0008] According to embodiments of this application, a pre-trained large model is used to analyze text data and determine the risk level of the document content, including: identifying sensitive entity data contained in the text data, including identity entity data, financial entity data, and commercial confidential data; extracting context data of the location of the sensitive entity data in the text data, determining the use scenario of the document content based on the context data, including normal scenarios and abnormal scenarios; and determining the risk level of the document content based on the sensitive entity data and the use scenario.

[0009] According to embodiments of this application, the method further includes: determining whether the text data contains a specified element, and determining whether the text data involves a specified business domain; and updating the risk level of the document content determined based on sensitive entity data and usage scenarios based on the determination results of the specified element and the determination results of the specified business domain.

[0010] According to embodiments of this application, the risk levels include a first level, a second level, and a third level, which decrease sequentially; the security control strategy includes the target storage area corresponding to the file content in the terminal device and the encryption algorithm corresponding to the file content; based on the risk level and the caller information of the application programming interface corresponding to the file content, determining a matching security control strategy from a preset rule base includes: when the risk level is the first level, determining the encryption algorithm as a first symmetric encryption algorithm and the target storage area as a preset encrypted storage area; when the risk level is the second level and the caller information belongs to a caller with a specified cooperative relationship, determining the encryption algorithm as a second symmetric encryption algorithm and the target storage area as an encrypted storage area corresponding to the specified cooperative relationship; when the risk level is the third level, determining the encryption algorithm as a third symmetric encryption algorithm and the target storage area as a secure storage area; wherein, the key lengths of the first symmetric encryption algorithm and the second symmetric encryption algorithm are equal and both are shorter than the key length of the third symmetric encryption algorithm, the first symmetric encryption algorithm conforms to the national cryptographic standard, and both the second symmetric encryption algorithm and the second symmetric encryption algorithm conform to international standards.

[0011] According to embodiments of this application, the security control strategy further includes access roles capable of accessing file content; determining a matching security control strategy from a preset rule base based on the risk level and the caller information of the application programming interface corresponding to the file content further includes: determining the access role of the file content as a first access type when the risk level is first level; determining the access role of the file content as a second access type when the risk level is second level; wherein the authorization scope of the first access type is smaller than that of the second access type.

[0012] According to an embodiment of this application, after obtaining the file content uploaded to the terminal device through a pre-built application programming interface of the terminal device, the method further includes: temporarily storing the file content in a cache area in the terminal device; and performing security control on the file content according to a security control strategy, including: encrypting the file content according to a matching encryption algorithm; and moving the encrypted file content from the cache area to the target storage area.

[0013] According to an embodiment of this application, the method further includes: after performing security control on the file content according to the security control policy, determining the access policy corresponding to the file content according to the risk level and the security control policy, so as to access the file content according to the access policy; wherein, the access policy includes the access subject, access conditions and access operations of the file content, and the access subject is allowed to perform access operations on the file content if the access conditions are met.

[0014] According to an embodiment of this application, the method further includes: obtaining identification information of the file content; associating and binding the identification information, sensitive entity data, usage scenario, risk level, security control strategy and access strategy to generate record information of the file content and storing it in a preset file security meta database.

[0015] According to an embodiment of this application, the method further includes: after storing the record information in a preset file security meta-database, in response to any access request initiated by an access subject to the file content, extracting the access policy corresponding to the file content from the file security meta-database based on the identification information of the file content; matching the access policy with the access request, and allowing the access subject to access the file content if the access request matches the access policy.

[0016] According to a second aspect of this application, a terminal device is provided, comprising: a file parsing module, configured to acquire file content uploaded to the terminal device through a pre-built application programming interface (API) of the terminal device, parse the file content, and obtain text data of the file content; a risk analysis module, configured to analyze the text data using a pre-trained large model to determine the risk level of the file content; a policy determination module, configured to determine a matching security control policy from a pre-set rule base based on the risk level and the caller information of the API corresponding to the file content; and a policy implementation module, configured to perform security control on the file content according to the security control policy.

[0017] According to a third aspect of this application, an electronic device is provided, comprising: one or more processors; and a memory for storing one or more computer programs, wherein the one or more processors execute the one or more computer programs to implement the steps of the method described above.

[0018] According to a fourth aspect of this application, a computer-readable storage medium is also provided, on which a computer program or instructions are stored, wherein the computer program or instructions, when executed by a processor, implement the steps of the above-described method.

[0019] According to a fifth aspect of this application, a computer program product is also provided, including a computer program or instructions that, when executed by a processor, implement the steps of the above-described method.

[0020] The file security management method, terminal device, electronic device, medium, and program product in the embodiments of this application analyze the content risks of files in real time and intelligently while uploading files through application programming interfaces, and obtain the corresponding storage location and encryption algorithm of the files accordingly. This allows for the adaptive allocation of security resources and the generation of corresponding access policies for the files, enabling high-security resources to focus on high-risk data, improving the effectiveness and economy of the overall security system, and achieving a refined improvement in file security management. Attached Figure Description

[0021] The above-mentioned contents, other objects, features and advantages of this application will become clearer from the following description of embodiments with reference to the accompanying drawings, in which:

[0022] Figure 1 This illustration schematically depicts application scenarios of a document security management method, terminal device, electronic device, medium, and program product according to embodiments of this application.

[0023] Figure 2 A flowchart illustrating a document security management method according to an embodiment of this application is shown schematically.

[0024] Figure 3A schematic diagram illustrating the structure of a terminal device according to an embodiment of this application is shown.

[0025] Figure 4 A block diagram schematically illustrates an electronic device suitable for implementing a secure document management method according to an embodiment of this application. Detailed Implementation

[0026] The embodiments of this application will now be described with reference to the accompanying drawings. However, it should be understood that these descriptions are exemplary only and are not intended to limit the scope of this application. In the following detailed description, numerous specific details are set forth to provide a thorough understanding of the embodiments of this application for ease of explanation. However, it will be apparent that one or more embodiments may be implemented without these specific details. Furthermore, descriptions of well-known structures and technologies are omitted in the following description to avoid unnecessarily obscuring the concepts of this application.

[0027] The terminology used herein is for the purpose of describing particular embodiments only and is not intended to limit the scope of this application. The terms “comprising,” “including,” etc., as used herein indicate the presence of the stated features, steps, operations, and / or components, but do not exclude the presence or addition of one or more other features, steps, operations, or components.

[0028] All terms used herein (including technical and scientific terms) have the meanings commonly understood by those skilled in the art, unless otherwise defined. It should be noted that the terms used herein are to be interpreted in a manner consistent with the context of this specification, and not in an idealized or overly rigid way.

[0029] When using expressions such as "at least one of A, B and C", they should generally be interpreted in accordance with the meaning that is commonly understood by those skilled in the art (e.g., "a system having at least one of A, B and C" should include, but is not limited to, a system having A alone, a system having B alone, a system having C alone, a system having A and B, a system having A and C, a system having B and C, and / or a system having A, B and C, etc.).

[0030] In the technical solution of this application, the user information (including but not limited to user personal information, user image information, user device information, such as location information) and data (including but not limited to data used for analysis, stored data, and displayed data) involved are all information and data authorized by the user or fully authorized by all parties. Furthermore, the collection, storage, use, processing, transmission, provision, disclosure, and application of related data all comply with relevant laws, regulations, and standards, take necessary confidentiality measures, do not violate public order and good morals, and provide corresponding operation entry points for users to choose to authorize or refuse.

[0031] In scenarios where personal information is used for automated decision-making, the methods, devices, and systems provided in this application all provide users with corresponding operation entry points for users to choose to agree to or reject the automated decision results; if the user chooses to reject, the process enters the expert decision-making process.

[0032] As used in this paper, the term "model" refers to a model that learns the relationship between inputs and outputs from training data, enabling it to generate corresponding outputs for a given input after training. Model generation can be based on machine learning techniques. Deep learning is a machine learning algorithm that processes inputs and provides corresponding outputs using multiple layers of processing units. A neural network model is an example of a deep learning-based model. In this paper, "model" may also be referred to as a "machine learning model," "learning model," "machine learning network," or "learning network," and these terms are used interchangeably.

[0033] It should be understood that machine learning generally includes three phases: training, testing, and application (also known as inference). In the training phase, a given model is trained using a large amount of training data, iteratively updating parameter values ​​until the model can consistently generate inferences that meet the expected goals from the training data. Through training, the model can be considered to have learned the relationship between inputs and outputs (also known as the input-output mapping) from the training data. The parameter values ​​of the trained model are determined. In the testing phase, test inputs are applied to the trained model to test whether it can provide the correct output, thus determining the model's performance. In the application phase, the model can be used to process actual inputs based on the trained parameter values ​​to determine the corresponding output.

[0034] In one or more embodiments described herein, the term "large model" can refer to a deep learning model with a large number of model parameters, which can include hundreds of millions, tens of billions, hundreds of billions, trillions, or even tens of trillions of model parameters. Large models can also be called foundational models or basic models. They are pre-trained using large-scale unlabeled corpora to produce pre-trained models with hundreds of millions of parameters. Such models can adapt to a wide range of downstream tasks and have good generalization ability, such as large language models and multimodal pre-trained models. It should be understood that in practical applications, large models only require a small number of samples to fine-tune the pre-trained model before being applied to different tasks. Large models can be widely used in natural language processing, computer vision, and other fields. Specifically, they can be applied to computer vision tasks such as visual question answering, image captioning, and image generation, as well as natural language processing tasks such as text-based sentiment classification, text summarization, and machine translation. Major application scenarios for large models can include digital assistants, intelligent robots, search, online education, office software, e-commerce, and intelligent design.

[0035] Figure 1 The illustrations depict application scenarios of document security management methods, terminal devices, electronic devices, media, and program products according to embodiments of this application.

[0036] like Figure 1 As shown, application scenario 100 according to an embodiment of this application may include a first terminal 101, a second terminal 102, a database 103, a network 104, and a server 105. The network 104 serves as a medium for providing a communication link between the first terminal 101, the second terminal 102, the database 103, and the server 105. The network 104 may include various connection types, such as wired or wireless communication links or fiber optic cables. For example, a user can use the first terminal 101 and the second terminal 102 to interact with the server 105 and / or the database 103 through the network 104 to receive or send information, etc.

[0037] The first terminal 101 and the second terminal 102 can be electronic devices such as smartphones, wearable devices, personal computers, intelligent voice interaction devices, smart home appliances, intelligent vehicles, in-vehicle terminals, aircraft, unmanned vending terminals, and extended reality devices. Extended reality devices can include virtual reality devices, augmented reality devices, and mixed reality devices. A client application for the target application can be installed and run on the terminal. This target application can include, but is not limited to, financial transaction applications, payment applications, shopping applications, web browser applications, search applications, instant messaging tools, email clients, and social media platform software (these are just examples). Furthermore, this embodiment does not limit the form of the target application, and it can include, but is not limited to, applications installed on the terminal, mini-programs, and web pages.

[0038] Server 105 can be a server providing various services, such as a backend management server supporting websites browsed by users using the first terminal 101 and the second terminal 102 (this is just an example). The backend management server can analyze and process received user requests and other data, and feed back the processing results (such as web pages, information, or data obtained or generated according to user requests) to the terminals. The server can be a standalone physical server, a server cluster or distributed system composed of multiple physical servers, or a cloud server providing cloud computing services such as cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communication, middleware services, domain name services, security services, content delivery networks, and big data. The server can be a backend server for the aforementioned target application, used to provide backend services to the clients of the target application.

[0039] Database 103 is a professional storage system for storing and managing data. It can store various types of data related to the target application, such as user account information, business transaction records, and content resource data. It supports structured, semi-structured, or unstructured data storage and has management capabilities such as data creation, deletion, modification, querying, backup, and recovery. In this application scenario, database 103 can be connected to server 105 via a communication link. Server 104 can retrieve the required data from database 103 for processing based on requests from the first terminal 101 and the second terminal 102. It can also synchronously store new data generated by the operations of the first terminal 101 and the second terminal 102 into database 103, thereby achieving data persistence and efficient retrieval.

[0040] It should be noted that the file security management method provided in this application embodiment can generally be executed by server 105 and / or terminals 101-102. Accordingly, the terminal device provided in this application embodiment can generally be set in server 105 and / or terminals 101-102.

[0041] It should be understood that Figure 1 The number of terminals, networks, databases, and servers shown is merely illustrative. Depending on implementation needs, any number of terminals, networks, databases, and servers can be included.

[0042] Figure 2 A flowchart illustrating a document security management method according to an embodiment of this application is shown schematically. Figure 2 As shown, the document security management method 200 according to the embodiments of this application may include steps S210 to S240.

[0043] In step S210, the file content uploaded to the terminal device through the application programming interface preset on the terminal device is obtained, and the file content is parsed to obtain the text data of the file content.

[0044] In embodiments of this application, user consent or authorization can be obtained before acquiring the file content uploaded to the terminal device via an application programming interface. For example, a request to acquire the file content can be sent to the user before operation S210. If the user consents or authorizes the acquisition of the file content, operation S210 is executed.

[0045] For example, an application programming interface (API) is a set of predefined rules, protocols, and tools for communication between different software components, defining how to request services, how to pass data, and what results to return.

[0046] For example, a terminal device is a computing device directly operated by the end user to initiate requests and receive responses. Terminal devices can be mobile smart terminals (such as smartphones and tablets), personal computers (such as desktop computers), professional terminals (such as smart POS machines and bank teller terminals), edge computing devices (such as edge servers), and Internet of Things (IoT) devices (such as smart access control systems).

[0047] The file content is the original binary byte sequence of the file, which encodes all the information of the file.

[0048] For example, parsing file content is the process of identifying the file's internal structure, decoding its encoding format, and extracting human-readable character information from it.

[0049] Text data is a standardized, continuous sequence of pure characters obtained after parsing the contents of a file. All formatting, style, layout, and binary information have been stripped away, leaving only the semantic content of the language. It forms the basis for subsequent natural language analysis and risk identification.

[0050] In step S220, a pre-trained large model is used to analyze the text data to determine the risk level of the document content.

[0051] Risk level is a graded and quantitative assessment of the overall sensitivity or danger of document content based on the analysis of text data.

[0052] For example, the large model uses deep semantic understanding to identify sensitive entities in the text (such as "ID number 310****1990" and "contract amount ¥50,000,000"), determine the risk scenarios in which the information appears (such as personal ID numbers appearing at high density in a list format), and combine its built-in knowledge association capabilities to determine whether the content involves trade secrets or specific regulatory areas. Finally, the large model integrates all analytical dimensions to output a quantitative risk level conclusion. For example, because the text simultaneously contains highly sensitive personal identification information and a significant transaction amount, and is presented in an internal audit report, it is classified as L2-Confidential.

[0053] In step S230, a matching security control strategy is determined from a preset rule base based on the risk level and the caller information of the application programming interface corresponding to the file content.

[0054] For example, caller information refers to the identity and attributes of the client or user who calls the application programming interface to upload file content, such as user ID, department, role, and whether they are an external partner.

[0055] For example, a pre-defined rule base is a structured, configurable database or policy file that binds specific input conditions (risk level and caller information) with specific output actions (security control policies).

[0056] For example, a security control policy is a set of executable security instructions dynamically generated by a rule base based on risk level and caller information, targeting a specific file. It typically includes: storage control, encryption control, access control, content protection, and auditing requirements.

[0057] In step S240, the file content is subject to security control according to the security control strategy.

[0058] For example, the file content can be encrypted using a specified encryption algorithm, converting plaintext into ciphertext.

[0059] For example, moving or copying the encrypted file content to a specified target storage area.

[0060] For example, preprocessing the file content, such as marking de-identified fields or preparing de-identified copies.

[0061] The file security management method based on the embodiments of this application analyzes the content risks of files in real time and intelligently while the files are uploaded to the API. This allows the risk level of the files to be determined before they are stored on the terminal device, enabling proactive risk defense. Based on this, corresponding security management strategies are obtained for the files, thereby adaptively allocating security resources to the files and focusing high-security resources on high-risk data, thus achieving a refined improvement in file security management.

[0062] In embodiments of this application, the terminal device has an interface gateway in front of the application programming interface (API); obtaining file content uploaded to the terminal device through the API pre-configured on the terminal device includes: responding to receiving an upload request initiated by the caller to the interface gateway, the upload request representing a request to upload file content to the terminal device; performing signature verification on the upload request through the interface gateway; and obtaining the file content from the API if the signature verification is successful.

[0063] For example, an interface gateway is a dedicated security proxy or middleware service deployed at the front end of an application programming interface.

[0064] Signature verification is a cryptographic verification performed by the interface gateway on upload requests. It uses a pre-shared key or asymmetric encryption algorithm to verify whether the request comes from a legitimate caller and has not been tampered with during transmission, such as RSA2 signature verification.

[0065] Signature verification confirms the validity of the digital signature in the request through the interface gateway, meaning that the request source is trustworthy and the content is complete.

[0066] For example, when an external partner's application attempts to upload a contract to the enterprise system via an application programming interface (API), the request first reaches the interface gateway. The interface gateway immediately interrupts the direct forwarding of the request and instead extracts the digital signature from the request header. It then performs a strict RSA signature verification using the partner's pre-configured public key to confirm that the request indeed comes from the legitimate partner's server and that the contract terms have not been tampered with during transmission. Only after successful verification is the gateway allowed to pass the request, and it instructs the backend service to begin receiving and temporarily storing the binary data of the contract file in the server's temporary cache area. If the verification fails, the request is directly rejected at the gateway layer, and a security event is recorded.

[0067] The file security management method based on the embodiments of this application places the most resource-intensive content processing (caching, parsing, analysis) after strong authentication, ensuring that all data flowing into the system comes from certified legitimate sources, effectively resisting resource exhaustion attacks or malicious file injections caused by a large number of upload requests from malicious attackers to the internal system.

[0068] In embodiments of this application, the text data of the file content includes first text data, second text data, and third text data; parsing the file content to obtain the text data of the file content includes: determining the type of the file content, including text type, image type, and text-image composite type; if the file content is text type, performing syntax parsing on the file content to obtain the first text data of the file content; if the file content is image type, performing optical character recognition on the image data in the file content to obtain the second text data of the file content; if the file content is text-image composite type, calling a preset parsing library to parse the file content to obtain the third text data of the file content.

[0069] The first text data is the raw text directly parsed from text / tag files; the second text data is the text converted from image data through Optical Character Recognition (OCR); the third text data is the composite text extracted from a composite document by a dedicated parser, which integrates the main text, tables, metadata, etc.

[0070] For example, a pre-defined parsing library is a pre-packaged software library that is capable of understanding the internal file structure and encoding of a compound document in a specific format.

[0071] For example, when receiving a scanned copy of a project contract containing key information, the system first determines that its type is a text-image composite type, and then calls a parsing library to perform deep parsing: the parsing library can separate the formal terms text embedded through digital encoding, the text in the OCR-converted signature and seal images in the scanned image, as well as the document title and author metadata, and finally integrate the character information from all sources according to the document's logical order to generate a complete text data.

[0072] The document security management method based on the embodiments of this application systematically covers three major categories: plain text, images, and complex compound documents. It ensures that no matter what digital form the data exists in (raw text, scanned images, formatted documents), the semantic information it carries can be effectively extracted, completely eliminating the blind spots in data analysis caused by unsupported formats. At the same time, it ultimately obtains a plain text data stream, which greatly simplifies the design of subsequent analysis. There is no need to care about the source of the text; only the uniform text format needs to be processed.

[0073] In the embodiments of this application, a pre-trained large model is used to analyze text data and determine the risk level of the document content, including: identifying sensitive entity data contained in the text data, including identity entity data, financial entity data, and commercial confidential data; extracting context data of the location of the sensitive entity data in the text data, determining the use scenario of the document content based on the context data, including normal scenarios and abnormal scenarios; and determining the risk level of the document content based on the sensitive entity data and the use scenario.

[0074] For example, identity entity data is information that can directly or indirectly identify a natural person, such as ID card number, bank card number, mobile phone number, address, biometric information, etc.

[0075] For example, financial entity data is information about financial or asset status, such as transaction amounts, account balances, and credit lines.

[0076] For example, commercial confidential data refers to information that has confidentiality value for a specific organization, such as project code names, undisclosed technical solutions, customer lists, internal document numbers, project codes, etc.

[0077] The contextual data of the location of sensitive entity data is the text information surrounding the sensitive entity data, including the sentence, paragraph, and chapter theme, as well as accompanying verbs, descriptive words, etc.

[0078] For example, a normal scenario is when sensitive entities appear in legitimate, compliant, and reasonable business processes, such as the identity information of both parties listed in a contract; an abnormal scenario is when sensitive entities appear in patterns that may indicate leakage, abuse, or violations, such as a large number of ID numbers appearing in plain text in chat logs.

[0079] Risk level is a graded and quantitative assessment of the overall risk of a document, taking into account the number, type, and sensitivity of sensitive entities, as well as the degree of abnormality in their usage scenarios.

[0080] The document security management method based on the embodiments of this application can accurately distinguish between legitimate business use and potential violation risks of sensitive data by simultaneously performing entity recognition and semantic scene analysis on a large model. This significantly reduces false alarms triggered by legitimate documents and effectively identifies hidden threats that are difficult to detect by traditional solutions, such as trade secrets without fixed formats and abnormal behavior patterns. Finally, it outputs a risk level that is more in line with actual risks.

[0081] In embodiments of this application, the method further includes: determining whether the text data contains a specified element, and determining whether the text data involves a specified business domain; and updating the risk level of the document content determined based on sensitive entity data and usage scenarios based on the determination results of the specified element and the determination results of the specified business domain.

[0082] Designated elements are structured data items that must be identified and extracted as explicitly defined by specific regulatory rules or internal reporting requirements, such as counterparty names, transaction amounts and descriptions of suspicious characteristics, and financial statistics.

[0083] The designated business areas are the business areas that are restricted or prohibited by the company's or organization's internal policies, such as "virtual currency transactions", "investment in highly polluting industries", and "unapproved cross-border data transfer".

[0084] Sensitive entity data, judgment results of specified elements, judgment results of business domains, and usage scenarios are each encapsulated as risk items. The above risk items are combined and output to obtain the corresponding risk profile. The risk profile contains the risk level, a list of risk items, contextual fragments of the specific content of the risk items, and the confidence level of the risk items.

[0085] The document security management method based on the embodiments of this application expands the dimensions of risk analysis from pure data sensitivity and scenario legitimacy to external regulatory compliance (whether to report) and internal business compliance. This enables the system to not only determine whether a document is dangerous, but also to accurately identify the specific regulations or policies it violates, thereby achieving automated insight into compliance risks and policy risks.

[0086] In the embodiments of this application, the risk levels include a first level, a second level, and a third level, which decrease sequentially; the security control strategy includes the target storage area corresponding to the file content in the terminal device and the encryption algorithm corresponding to the file content; determining the matching security control strategy from the preset rule base based on the risk level and the caller information of the application programming interface corresponding to the file content includes: when the risk level is the first level, determining the encryption algorithm as a first symmetric encryption algorithm and the target storage area as a preset encrypted storage area; when the risk level is the second level and the caller information belongs to a caller that meets the specified cooperation relationship, determining the encryption algorithm as a second symmetric encryption algorithm and the target storage area as an encrypted storage area corresponding to the specified cooperation relationship; when the risk level is the third level, determining the encryption algorithm as a third symmetric encryption algorithm and the target storage area as a secure storage area; wherein, the key lengths of the first symmetric encryption algorithm and the second symmetric encryption algorithm are equal and both are shorter than the key length of the third symmetric encryption algorithm, the first symmetric encryption algorithm conforms to the national cryptographic standard, and both the second symmetric encryption algorithm and the second symmetric encryption algorithm conform to international standards.

[0087] For example, in the case of a risk level of Level 1, the first symmetric encryption algorithm is determined to be SM4, the target storage area is a crypto vault with the highest level of physical and logical isolation, and a real-time content anonymization strategy is forcibly enabled.

[0088] For example, if the risk level is level 2 and the caller information is identified as belonging to a predefined external partner A, the second symmetric encryption algorithm is determined to be AES-256, the target storage area is a dedicated logically isolated storage area (such as the partner encryption area) corresponding to external partner A, and a full-record level audit log policy is enforced for such access.

[0089] For example, in the case of a risk level of three, the third symmetric encryption algorithm is determined to be AES-128, and the target storage area is standard secure storage.

[0090] The file security management method based on the embodiments of this application intelligently associates risk level with caller attributes, realizes refined and scenario-based automatic matching of encryption and storage strategies, achieves accurate hierarchical adaptation of security resources, and enables high-security resources to focus on high-risk data, significantly improving the effectiveness and economy of the overall security system.

[0091] In embodiments of this application, the security control strategy further includes access roles that can access file content; determining the matching security control strategy from a preset rule base based on the risk level and the caller information of the application programming interface corresponding to the file content further includes: determining the access role of the file content as a first access type when the risk level is first level; determining the access role of the file content as a second access type when the risk level is second level; wherein the authorization scope of the first access type is smaller than that of the second access type.

[0092] For example, if the risk level is Level 1, the rule base determines that the file content is bound to an access role that is restricted to security administrators only.

[0093] For example, in the case of a risk level of Level 2, the access roles are dynamically generated as a combination of the auditor from Partner A and the corresponding department of our bank.

[0094] The file security management method based on the embodiments of this application configures the first access type with the smallest authorization scope for the highest risk level (first level) files, ensuring that core assets are only accessed by a very small number of trusted entities, thereby significantly reducing the data exposure surface and internal threat risk from the source; while for the second highest risk level files, a second access type with a relatively wide authorization scope is configured, which maintains a strict access control boundary while meeting business collaboration needs, and realizes intelligent adjustment of the access threshold according to the data sensitivity.

[0095] In embodiments of this application, after obtaining the file content uploaded to the terminal device through the application programming interface pre-installed on the terminal device, the method further includes: temporarily storing the file content in a cache area in the terminal device; and performing security control on the file content according to a security control strategy, including: encrypting the file content according to a matching encryption algorithm; and moving the encrypted file content from the cache area to the target storage area.

[0096] For example, a cache area is a block of memory or disk space on a terminal device used for temporary, high-speed data storage, providing a workspace for the processing required before uploading file content.

[0097] For example, encrypting file content refers to the process of using a key generated by a matching encryption algorithm to mathematically transform the original byte stream (plaintext) of the file content, generating unreadable ciphertext. The purpose is to ensure that even if the data is illegally obtained, it cannot be deciphered.

[0098] Moving the encrypted file content from the cache area to the target storage area refers to the operation of securely transferring the file content data and storage location, while clearing the original data in the cache area after confirming successful storage in the target storage area.

[0099] The file security management method based on the embodiments of this application ensures that each file receives matching encryption protection according to its risk level and is stored in the correct location, laying a reliable security foundation for subsequent access control.

[0100] In embodiments of this application, the method further includes: after performing security control on the file content according to the security control policy, determining the access policy corresponding to the file content according to the risk level and the security control policy, so as to access the file content according to the access policy; wherein, the access policy includes the access subject, access conditions and access operations of the file content, and the access subject is allowed to perform access operations on the file content if the access conditions are met.

[0101] For example, the access subject is the entity identifier that is authorized to access the file content, which can be a single user, user group, role (such as project manager), department, or application identity.

[0102] For example, access conditions are a series of dynamic, context-dependent constraints that define the environment, state, or situation under which the permissions granted to an access subject will take effect.

[0103] For example, an access operation is a specific type of action that the accessing subject is explicitly allowed to perform on the file content, such as reading, downloading, editing, copying, sharing, deleting, etc.

[0104] The file security management method based on the embodiments of this application imposes additional and necessary constraints on access permissions through access conditions, ensuring that access permissions can only be exercised in truly necessary and secure scenarios. This narrows the scope of the permissions to the maximum extent while granting permissions.

[0105] In embodiments of this application, the method further includes: obtaining identification information of the file content; associating and binding the identification information, sensitive entity data, usage scenario, risk level, security control policy, and access policy to generate record information of the file content and storing it in a preset file security metadata database. For example, the identification information of the file content is a logical identifier that can uniquely and persistently identify the file content, such as a content hash value.

[0106] For example, by using technical means, a permanent and mandatory logical link can be established between identification information, sensitive entity data, usage scenarios, risk levels, security control strategies, and access policies. These technical means can include database foreign keys, key-value pairs, graph relationships, etc.

[0107] For example, the recorded information is a complete security description profile of the file's content, formed after association and binding.

[0108] The File Security Metadatabase is an independent database specifically designed for centralized and persistent storage of all file record information.

[0109] Based on the file security management method of this application embodiment, the file content itself can be freely migrated and backed up, while all its security attributes and access policies remain unchanged in the file security metadata database. This makes security management completely independent of the underlying storage infrastructure and has greater flexibility.

[0110] In the embodiments of this application, after storing the record information in a preset file security meta-database, in response to any access request initiated by any access subject to the file content, the access policy corresponding to the file content is extracted from the file security meta-database based on the identification information of the file content; the access policy is matched with the access request, and if the access request and the access policy match, the access subject is allowed to access the file content.

[0111] For example, the access subject refers to the entity that attempts to perform operations on the file, which can be a natural person user, application, service account, or role.

[0112] For example, an access request is a request issued by an access subject with the intention of performing a specific operation on the content of a specific file. An access request includes information such as the identity of the access subject, the type of operation requested (read, write, delete), the time, and the source IP.

[0113] For example, matching access policies with access requests involves comparing and logically calculating the real-time information carried in the access request (such as the identity of the access subject, the type of operation, and the access time) with the rules defined in the access policy obtained from the file security metadata database.

[0114] If the access request matches the access policy, the access subject is allowed to access the file content. Then, the detailed matching process between the access request and the access policy and the final matching result are recorded to obtain the access log of the current access request.

[0115] Based on the file security management method of this application embodiment, any access request for file content is matched by querying the record information in the file security metadata database to obtain the latest and most authoritative access policy. Any update of the access policy by the administrator can take effect globally on the next access, realizing dynamic management of the policy and second-level response. At the same time, a complete and tamper-proof security metadata record is established for each file content, from content risk analysis to each access, providing solid data support for internal compliance audit and response to external regulatory inspections.

[0116] Based on the security control methods described in the aforementioned documents, embodiments of this application also provide a terminal device. The following will be combined with... Figure 3The terminal device is described in detail.

[0117] Figure 3 A schematic block diagram of a terminal device according to an embodiment of this application is shown.

[0118] like Figure 3 As shown, the terminal device 300 in this embodiment includes a file parsing module 310, a risk analysis module 320, a policy determination module 330, and a policy implementation module 340.

[0119] The file parsing module 310 is used to obtain the file content uploaded to the terminal device through the application programming interface (API) pre-installed on the terminal device, parse the file content, and obtain the text data of the file content. In one embodiment, the file parsing module 310 can be used to perform step S210 described above, which will not be repeated here.

[0120] The risk analysis module 320 is used to analyze text data using a pre-trained large model to determine the risk level of the document content. In one embodiment, the risk analysis module 320 can be used to perform step S220 described above, which will not be repeated here.

[0121] The policy determination module 330 is used to determine a matching security control policy from a preset rule base based on the risk level and the caller information of the application programming interface corresponding to the file content. In one embodiment, the policy determination module 330 can be used to execute step S230 described above, which will not be repeated here.

[0122] The policy enforcement module 340 is used to perform security control on file content according to the security control policy. In one embodiment, the policy enforcement module 340 can be used to execute the step S240 described above, which will not be repeated here.

[0123] According to embodiments of this application, any multiple modules among the file parsing module 310, risk analysis module 320, strategy determination module 330, and strategy implementation module 340 can be merged into one module, or any one of these modules can be split into multiple modules. Alternatively, at least some of the functions of one or more of these modules can be combined with at least some of the functions of other modules and implemented in one module. According to embodiments of this application, at least one of the file parsing module 310, risk analysis module 320, strategy determination module 330, and strategy implementation module 340 can be at least partially implemented as hardware circuitry, such as field-programmable gate arrays, programmable logic arrays, systems-on-a-chip, systems-on-a-substrate, systems-on-package, application-specific integrated circuits, or implemented in hardware or firmware by any other reasonable means of integrating or packaging circuitry, or implemented in software, hardware, or firmware, or in any appropriate combination of any of these three implementation methods. Alternatively, at least one of the file parsing module 310, risk analysis module 320, strategy determination module 330, and strategy implementation module 340 may be implemented at least partially as a computer program module, which can perform corresponding functions when the computer program module is run.

[0124] Figure 4 A block diagram schematically illustrates an electronic device suitable for implementing a secure document management method according to an embodiment of this application.

[0125] like Figure 4 As shown, an electronic device 400 according to an embodiment of this application includes a processor 401, which can perform various appropriate actions and processes according to a program stored in a read-only memory 402 or a program loaded from a storage portion 408 into a random access memory 403. The processor 401 may include, for example, a general-purpose microprocessor, an instruction set processor and / or an associated chipset and / or a dedicated microprocessor. The processor 401 may also include onboard memory for caching purposes. The processor 401 may include a single processing unit or multiple processing units for executing different steps of the method flow according to an embodiment of this application.

[0126] Random access memory 403 stores various programs and data required for the operation of electronic device 400. Processor 401, read-only memory 402, and random access memory 403 are interconnected via bus 404. Processor 401 executes various steps of the method flow according to embodiments of this application by executing programs stored in read-only memory 402 and / or random access memory 403. It should be noted that the programs may also be stored in one or more memories other than read-only memory 402 and random access memory 403. Processor 401 may also execute various steps of the method flow according to embodiments of this application by executing programs stored in said one or more memories.

[0127] According to embodiments of this application, the electronic device 400 may further include an input / output interface 405, which is also connected to a bus 404. The electronic device 400 may also include one or more of the following components connected to the input / output interface 405: an input section 406 including a keyboard, mouse, etc.; an output section 407 including a cathode ray tube, liquid crystal display, etc., and a speaker, etc.; a storage section 408 including a hard disk, etc.; and a communication section 409 including a network interface card, such as a local area network card, modem, etc. The communication section 409 performs communication processing via a network such as the Internet. A drive 410 is also connected to the input / output interface 405 as needed. A removable medium 411, such as a disk, optical disk, magneto-optical disk, semiconductor memory, etc., is installed on the drive 410 as needed so that computer programs read from it can be installed into the storage section 408 as needed.

[0128] Embodiments of this application also provide a computer-readable storage medium, which may be included in the device / apparatus / system described in the above embodiments; or it may exist independently and not assembled into the device / apparatus / system. The computer-readable storage medium carries one or more programs, which, when executed, implement the method according to the embodiments of this application.

[0129] According to embodiments of this application, the computer-readable storage medium can be a non-volatile computer-readable storage medium, such as including but not limited to: portable computer disks, hard disks, random access memory, read-only memory, erasable programmable read-only memory, portable compact disk read-only memory, optical storage devices, magnetic storage devices, or any suitable combination thereof. In embodiments of this application, the computer-readable storage medium can be any tangible medium containing or storing a program that can be used by or in conjunction with an instruction execution system, apparatus, or device. For example, according to embodiments of this application, the computer-readable storage medium may include the read-only memory 402 described above, and / or random access memory 403, and / or one or more memories other than read-only memory 402 and random access memory 403.

[0130] Embodiments of this application also include a computer program product comprising a computer program containing program code for performing the methods shown in the flowchart. When the computer program product is run on a computer system, the program code is used to cause the computer system to implement the methods provided in the embodiments of this application.

[0131] In one embodiment, the computer program may rely on a tangible storage medium such as an optical storage device or a magnetic storage device. In another embodiment, the computer program may also be transmitted and distributed in the form of signals over a network medium, and downloaded and installed via communication section 409, and / or installed from removable medium 411. The program code contained in the computer program can be transmitted using any suitable network medium, including but not limited to: wireless, wired, etc., or any suitable combination thereof.

[0132] In embodiments of this application, the computer program can be downloaded and installed from a network via communication section 409, and / or installed from removable medium 411. When the computer program is executed by processor 401, it performs the functions defined in the system of this application embodiment. According to embodiments of this application, the systems, devices, apparatuses, modules, units, etc., described above can be implemented by computer program modules.

[0133] According to embodiments of this application, program code for executing the computer programs provided in the embodiments of this application can be written in any combination of one or more programming languages. Specifically, these computational programs can be implemented using high-level procedural and / or object-oriented programming languages, and / or assembly / machine languages. The program code can be executed entirely on the user's computing device, partially on the user's device, partially on a remote computing device, or entirely on a remote computing device or server. In cases involving remote computing devices, the remote computing device can be connected to the user's computing device via any type of network, including a local area network (LAN) or a wide area network (WAN), or it can be connected to an external computing device (e.g., via the Internet using an Internet service provider).

[0134] The flowcharts and block diagrams in the accompanying drawings illustrate the architecture, functionality, and operation of possible implementations of systems, methods, and computer program products according to various embodiments of this application. In this regard, each block in a flowchart or block diagram may represent a module, segment, or portion of code containing one or more executable instructions for implementing a specified logical function. It should also be noted that in some alternative implementations, the functions indicated in the blocks may occur in a different order than those indicated in the drawings. For example, two consecutively indicated blocks may actually be executed substantially in parallel, and they may sometimes be executed in reverse order, depending on the functions involved. It should also be noted that each block in a block diagram or flowchart, and combinations of blocks in a block diagram or flowchart, may be implemented using a dedicated hardware-based system that performs the specified function or operation, or using a combination of dedicated hardware and computer instructions.

[0135] Those skilled in the art will understand that the features described in the various embodiments of this application can be combined and / or combined in various ways, even if such combinations or combinations are not explicitly described in this application. In particular, the features described in the various embodiments of this application can be combined and / or combined in various ways without departing from the spirit and teachings of this application. All such combinations and / or combinations fall within the scope of this application.

Claims

1. A method for secure file management, applied to terminal devices, characterized in that, The method includes: The file content uploaded to the terminal device through the application programming interface pre-installed on the terminal device is obtained, and the file content is parsed to obtain the text data of the file content; The text data is analyzed using a pre-trained large model to determine the risk level of the document content; Based on the risk level and the caller information of the application programming interface corresponding to the file content, a matching security control strategy is determined from a preset rule base; The file content is subject to security control according to the aforementioned security control strategy.

2. The method according to claim 1, characterized in that, The terminal device has an interface gateway set up in front of the application programming interface; The step of obtaining the file content uploaded to the terminal device through the application programming interface pre-installed on the terminal device includes: In response to receiving an upload request initiated by the caller to the interface gateway, the upload request represents a request to upload the file content to the terminal device; The upload request is signed and verified through the interface gateway. If the signature verification is successful, the interface gateway obtains the file content from the application programming interface.

3. The method according to claim 1, characterized in that, The text data of the file content includes first text data, second text data, and third text data; The process of parsing the file content to obtain the text data of the file content includes: Determine the type of the file content, including text type, image type, and text-image composite type; If the file content is of the specified text type, perform syntax parsing on the file content to obtain the first text data of the file content; When the file content is the image type, optical character recognition is performed on the image data in the file content to obtain the second text data of the file content; If the file content is a text-image composite type, a preset parsing library is called to parse the file content to obtain the third text data of the file content.

4. The method according to claim 1, characterized in that, The process of analyzing the text data using a pre-trained large model to determine the risk level of the document content includes: Identify sensitive entity data contained in the text data, including identity entity data, financial entity data, and commercial confidential data; Extract the context data of the location of the sensitive entity data in the text data, and determine the usage scenario of the file content based on the context data. The usage scenario includes normal scenario and abnormal scenario. Based on the sensitive entity data and the usage scenario, the risk level of the file content is determined.

5. The method according to claim 4, characterized in that, The method further includes: Determine whether the text data contains a specified element, and determine whether the text data involves a specified business area; Based on the judgment results of the specified elements and the judgment results of the specified business domain, the risk level of the document content determined based on the sensitive entity data and the usage scenario is updated.

6. The method according to claim 1, characterized in that, The risk levels are divided into three levels, which decrease in descending order: Level 1, Level 2, and Level 3. The security control strategy includes the target storage area corresponding to the file content in the terminal device and the encryption algorithm corresponding to the file content. The step of determining a matching security control strategy from a preset rule base based on the risk level and the caller information of the application programming interface corresponding to the file content includes: When the risk level is the first level, the encryption algorithm is determined to be a first symmetric encryption algorithm, and the target storage area is a preset encrypted storage area; If the risk level is the second level and the caller information belongs to a caller that meets the specified cooperative relationship, the encryption algorithm is determined to be the second symmetric encryption algorithm, and the target storage area is the encrypted storage area corresponding to the specified cooperative relationship. If the risk level is the third level, the encryption algorithm is determined to be a third symmetric encryption algorithm, and the target storage area is a secure storage area. The first symmetric encryption algorithm and the second symmetric encryption algorithm have the same key length, and both are shorter than the key length of the third symmetric encryption algorithm. The first symmetric encryption algorithm conforms to the national cryptographic standard, and both the second symmetric encryption algorithm and the third symmetric encryption algorithm conform to international standards.

7. The method according to claim 6, characterized in that: The security control strategy also includes access roles that can access the file content; The step of determining a matching security control strategy from a preset rule base based on the risk level and the caller information of the application programming interface corresponding to the file content further includes: If the risk level is the first level, the access role for the file content is determined to be the first access type; If the risk level is the second level, the access role for the file content is determined to be the second access type; The authorization scope of the first access type is smaller than that of the second access type.

8. The method according to claim 6, characterized in that, After obtaining the file content uploaded to the terminal device through the application programming interface pre-installed on the terminal device, the method further includes: temporarily storing the file content in the cache area of ​​the terminal device; The security control of the file content according to the security control strategy includes: The file content is encrypted according to the matching encryption algorithm; The encrypted file content is moved from the cache area to the target storage area.

9. The method according to claim 4, characterized in that, The method further includes: after performing security control on the file content according to the security control policy. Based on the risk level and the security control strategy, determine the access strategy corresponding to the file content, so as to access the file content in accordance with the access strategy; The access policy includes the access subject, access conditions, and access operations for the file content. The access subject is allowed to perform the access operation for the file content if the access conditions are met.

10. The method according to claim 9, characterized in that, The method further includes: Obtain the identification information of the file content; The identification information, the sensitive entity data, the usage scenario, the risk level, the security control strategy, and the access strategy are associated and bound to generate record information of the file content and stored in a preset file security meta database.

11. The method according to claim 10, characterized in that, The method further includes: after storing the recorded information in a preset file security metadata database. In response to any access request initiated by any accessing subject to the file content, the access policy corresponding to the file content is extracted from the file security metadata based on the identification information of the file content; The access policy is matched with the access request, and if the access request matches the access policy, the access subject is allowed to access the file content.

12. A terminal device, characterized in that, include: The file parsing module is used to obtain the file content uploaded to the terminal device through the application programming interface pre-installed on the terminal device, parse the file content, and obtain the text data of the file content. The risk analysis module is used to analyze the text data using a pre-trained large model to determine the risk level of the document content; The strategy determination module is used to determine a matching security control strategy from a preset rule base based on the risk level and the caller information of the application programming interface corresponding to the file content. The policy implementation module is used to perform security control on the file content according to the security control policy.

13. An electronic device, comprising: One or more processors; Memory, used to store one or more computer programs. The characteristic feature is that the one or more processors execute the one or more computer programs to implement the steps of the method according to any one of claims 1 to 11.

14. A computer-readable storage medium having a computer program or instructions stored thereon, characterized in that, When the computer program or instructions are executed by a processor, they implement the steps of the method according to any one of claims 1 to 11.

15. A computer program product, comprising a computer program or instructions, characterized in that, When the computer program or instructions are executed by a processor, they implement the steps of the method according to any one of claims 1 to 11.

Images