Compliance testing method and apparatus, electronic device and computer storage medium

Abstract

The embodiments of the present application disclose a compliance testing method, comprising: in response to an operation of the current user for confirming a displayed field, acquiring current user information corresponding to the current user; acquiring location information of the current user and, by means of a rule engine, determining laws and regulations corresponding to the location information; and, by means of the rule engine and on the basis of the laws and regulations corresponding to the location information, performing a compliance test on the current user information to obtain a compliance test result. The accuracy of compliance testing is improved.

Description

Compliance detection methods, devices, electronic equipment, and computer storage media

[0001] This application claims priority to Chinese patent application filed on August 22, 2023, with application number 202311065166.7 and application name “Compliance Detection Method, Device, Electronic Device and Computer Storage Medium”, all contents of which are incorporated by reference into this application. Technical Field

[0002] The present application relates to the field of computer technology, and in particular to a compliance detection method, device, electronic device, and computer storage medium. Background Art

[0003] With the development of science and technology, applications are collecting more and more user information. In order to prevent the leakage of user information, various countries have introduced some laws and regulations. These laws and regulations stipulate the user information that applications can store in order to protect user information. Technical issues

[0004] Currently, apps' privacy statements are automatically checked against laws and regulations to determine compliance. However, some apps don't actually collect user information according to their privacy statements. This approach, by checking privacy statements, can misidentify non-compliant apps as compliant, resulting in low accuracy. Technical Solutions

[0005] The embodiments of the present application provide a compliance detection method, device, electronic device and computer storage medium, which can solve the technical problem of low accuracy of current compliance detection methods.

[0006] This embodiment of the present application provides a compliance detection method, including:

[0007] Obtain a display instruction and determine the fields corresponding to the user information to be obtained on the page corresponding to the display instruction;

[0008] Displaying the above fields, and in response to the current user confirming the above fields, obtaining the current user information corresponding to the above current user;

[0009] Obtain the location information of the current user and determine the laws and regulations corresponding to the location information through a rule engine;

[0010] Through the rule engine, according to the laws and regulations corresponding to the location information, the current user information is subjected to compliance testing to obtain a compliance testing result;

[0011] If the compliance check result is compliance, the current user information will be stored.

[0012] Accordingly, an embodiment of the present application provides a compliance detection device, comprising:

[0013] An acquisition module is used to acquire a display instruction and determine the fields corresponding to the user information to be acquired on the page corresponding to the display instruction;

[0014] A display module, configured to display the above fields and, in response to a confirmation operation of the current user on the displayed fields, obtain current user information corresponding to the current user;

[0015] A determination module is used to obtain the location information of the current user and determine the laws and regulations corresponding to the location information through a rule engine;

[0016] A detection module is used to perform compliance detection on the current user information according to the laws and regulations corresponding to the location information through the rule engine to obtain a compliance detection result;

[0017] The storage module is used to store the current user information if the compliance detection result is compliance.

[0018] In addition, an embodiment of the present application also provides an electronic device, including a processor and a memory, wherein the memory stores a computer program, and the processor is used to run the computer program in the memory to implement the compliance detection method provided in the embodiment of the present application.

[0019] In addition, an embodiment of the present application also provides a computer-readable storage medium, which stores a computer program. The computer program is suitable for loading by a processor to execute any compliance detection method provided in the embodiment of the present application.

[0020] In addition, an embodiment of the present application also provides a computer program product, including a computer program, which, when executed by a processor, implements any compliance detection method provided in the embodiment of the present application. Beneficial effects

[0021] In an embodiment of the present application, a display instruction is obtained, and the field corresponding to the user information that needs to be obtained on the page corresponding to the display instruction is determined; the field is displayed, and in response to the current user's confirmation operation on the displayed field, the current user information corresponding to the current user is obtained; the current user's location information is obtained, and the laws and regulations corresponding to the location information are determined through a rule engine; through the rule engine, the current user information is subjected to a compliance check based on the laws and regulations corresponding to the location information to obtain a compliance check result; if the compliance check result is compliant, the current user information is stored to implement a compliance check on the current user information, thereby improving the accuracy of the obtained compliance check result, and performing a compliance check on the current user information when collecting the current user information, and storing the current user information only when it is compliant, thereby implementing filtering and warehousing of the current user information to avoid non-compliance in the application where the page corresponding to the display instruction is located. BRIEF DESCRIPTION OF THE DRAWINGS

[0022] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present application. For those skilled in the art, other drawings can be obtained based on these drawings without creative work.

[0023] FIG1 is a flow chart of a compliance detection method provided in an embodiment of the present application;

[0024] FIG2 is a schematic diagram of a query process provided by an embodiment of the present application;

[0025] FIG3 is a schematic diagram of another compliance detection method provided in an embodiment of the present application;

[0026] FIG4 is a schematic diagram of the structure of a compliance detection device provided in an embodiment of the present application;

[0027] FIG5 is a schematic diagram of the structure of an electronic device provided in an embodiment of the present application. Modes for Carrying Out the Invention

[0028] The following will be combined with the drawings in the embodiments of this application to clearly and completely describe the technical solutions in the embodiments of this application. Obviously, the embodiments described are only part of the embodiments of this application, not all of the embodiments. Based on the embodiments in this application, all other embodiments obtained by those skilled in the art without making creative efforts are within the scope of protection of this application.

[0029] The embodiments of the present application provide a compliance detection method, device, electronic device, and computer storage medium. The compliance detection device can be integrated into an electronic device, which can be a server, a terminal, or other device.

[0030] The server can be an independent physical server, a server cluster or distributed system composed of multiple physical servers, or a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, network acceleration services (Content Delivery Network, CDN), as well as big data and artificial intelligence platforms.

[0031] The terminal can be a smartphone, tablet computer, laptop computer, desktop computer, smart speaker, smart watch, etc., but is not limited to these.

[0032] The terminal and the server can be connected directly or indirectly via wired or wireless communication, and this application does not limit this. In addition, the "plurality" in the embodiments of this application refers to two or more. The "first" and "second" in the embodiments of this application are used to distinguish descriptions and should not be understood to imply relative importance.

[0033] It should be noted that the order of description of the following embodiments is not intended to limit the preferred order of the embodiments.

[0034] In this embodiment, the description will be made from the perspective of the compliance detection device. In order to facilitate the description of the compliance detection method of this application, the following detailed description will be given with the compliance detection device integrated in the terminal, that is, the terminal will be used as the execution subject.

[0035] Please refer to Figure 1, which is a flow chart of a compliance detection method provided by an embodiment of the present application. The compliance detection method may include:

[0036] S101: Obtain a display instruction, and determine a field corresponding to user information that needs to be obtained on a page corresponding to the display instruction.

[0037] The terminal may obtain a display instruction in response to a trigger operation of the user. The page corresponding to the display instruction refers to the page displayed by the terminal in response to the trigger operation of the user.

[0038] The fields corresponding to the user information to be obtained on the page corresponding to the display instruction refer to the attributes used to record user information. For example, the fields corresponding to user information can refer to age, gender, or education level.

[0039] The user information that needs to be obtained by the page corresponding to the display instruction can be set according to actual conditions. For example, the user information that needs to be obtained by the page corresponding to the display instruction can be the user's age or the user's gender, which is not limited in this embodiment of the present application.

[0040] S102: Display fields, and in response to a confirmation operation of the current user on the displayed fields, obtain current user information corresponding to the current user.

[0041] The current user refers to the user who uses the terminal. The form of the terminal display field can be set according to the actual situation, for example, the field can be displayed in the form of a table or a pop-up window, which is not limited in this embodiment of the present application.

[0042] After the terminal displays the field, the current user can enter specific information corresponding to the field and confirm it. The terminal can thus obtain the current user information corresponding to the current user in response to the current user's confirmation operation on the displayed field.

[0043] Among them, the method for the current user to input the current user information can be set according to the actual situation. For example, the current user can input the current user information by manual input or voice input, and this embodiment of the present application does not limit this. In the embodiment of the present application, when the page corresponding to the display instruction needs to be displayed, only the user information required to obtain the page corresponding to the display instruction is obtained, so as to realize the gradual collection of user information on demand, rather than directly collecting all the user information of the user, thereby reducing the phenomenon that the collected user information does not comply with laws and regulations.

[0044] In some embodiments, displaying the field and, in response to a confirmation operation of the current user on the displayed field, obtaining current user information corresponding to the current user includes:

[0045] According to the laws and regulations corresponding to the location information, check whether the user information corresponding to the field is compliant;

[0046] If the user information corresponding to the field is not compliant, the field is updated according to the laws and regulations corresponding to the information to obtain the target field;

[0047] Display target fields;

[0048] In response to a confirmation operation of the current user on the displayed target field, current user information corresponding to the current user is acquired.

[0049] Since the laws and regulations in different regions may be different, the compliance results may be different. For example, in the laws and regulations of the Q1 region, user A's information is allowed to be stored. In the laws and regulations of the Q2 region, user A's information is not allowed to be stored, but user B's information is allowed to be stored. When the current user moves from the Q1 region to the Q2 region, user A's information is non-compliant. The terminal can update the field corresponding to user A's information to the target field corresponding to user B's information in order to collect and store user B's information, thereby dynamically adjusting the user information that needs to be collected according to the laws and regulations and avoiding non-compliance of the stored user information. S103. Obtain the location information of the current user and determine the laws and regulations corresponding to the location information through the rule engine.

[0050] The type of rule engine can be selected according to actual conditions. For example, the rule engine can be a drools rule engine or a groovy engine rule, which is not limited in this embodiment of the present application.

[0051] The laws and regulations corresponding to each region can be pre-stored in the rule engine. After obtaining the current user's location information, the terminal will use the laws and regulations corresponding to the region matching the location information as the laws and regulations corresponding to the location information.

[0052] The rule engine can be deployed in a terminal or a server. When deployed in a server, the rule engine can be called by multiple terminals. In this case, the rule engine is a universal platform that can be used to detect the compliance of user information collected and stored by a single application or by multiple applications.

[0053] For example, the rule engine can be used to detect whether the user information collected and stored by the a1 application in the terminal and the user information collected and stored by the a2 application are compliant.

[0054] When the rule engine is used to detect whether the user information collected and stored by multiple applications is compliant, the types of the multiple applications can be the same or different. For example, the multiple applications can include game applications and video applications.

[0055] Optionally, the terminal may obtain the current user's location information while obtaining the current user information corresponding to the current user in response to the current user's confirmation operation on the displayed field, or the terminal may obtain the current user's location information after obtaining the current user information corresponding to the current user in response to the current user's confirmation operation on the displayed field, or the terminal may obtain the current user's location information before obtaining the current user information corresponding to the current user in response to the current user's confirmation operation on the displayed field. The embodiments of the present application are not limited here.

[0056] S104. Through the rule engine, according to the laws and regulations corresponding to the location information, the current user information is subjected to compliance detection to obtain the compliance detection result.

[0057] After the terminal obtains the laws and regulations corresponding to the location information, it can use the rule engine to detect whether the current user information complies with the laws and regulations based on the laws and regulations corresponding to the location information. If it does, the compliance detection result is compliant; if it does not, the compliance detection result is non-compliant.

[0058] Through the rule engine, the current user information is checked for compliance based on the laws and regulations corresponding to the location information. This can be understood as a process of matching the current user information with the laws and regulations corresponding to the location information. The implementation process can be selected according to actual conditions. For example, the current user information can be stored as a fact object in the working memory, and the laws and regulations corresponding to the location information and the fact object can be matched through the Pattern Matcher in the rule engine. This is not limited in the embodiments of the present application.

[0059] When the terminal adjusts the field in real time according to the laws and regulations corresponding to the location information, steps S104 and S105 may be directly executed, or a determination step may be executed to determine whether to execute steps S104 and S105. The determination step may include determining whether the current user information is the current user information corresponding to the field or the current user information corresponding to the target field. If the current user information is the current user information corresponding to the field, steps S104 and S105 are executed; if the current user information is the current user information corresponding to the target field, steps S104 and S105 are not executed.

[0060] When the rule engine is used to detect compliance of information collected and stored by multiple applications, in order to quickly obtain compliance detection results, the terminal can classify and store the laws and regulations of each region according to the type of application. In this case, the rule engine performs compliance detection on the current user information based on the laws and regulations corresponding to the location information. The process of obtaining the compliance detection result can be as follows:

[0061] Obtain the target type of the application where the page corresponding to the display instruction is located through the rule engine;

[0062] From the laws and regulations corresponding to the location information, the laws and regulations that match the target type are screened out to obtain the target laws and regulations; based on the target laws and regulations, the current user information is subjected to compliance detection to obtain the compliance detection results.

[0063] For example, if the target type is game type, the current user information is the current user's age, and the laws and regulations that match the game type are laws and regulations L1. For another example, if the target type is video type, the current user information is the current user's age, and the laws and regulations that match the video type are laws and regulations L2.

[0064] In an embodiment of the present application, a rule engine is used to obtain the target type of the application where the page corresponding to the display instruction is located; laws and regulations that match the target type are screened out from the laws and regulations corresponding to the location information to obtain target laws and regulations; based on the target laws and regulations, a compliance check is performed on the current user information to obtain a compliance check result, so that compliance checking is performed only based on the target laws and regulations, and there is no need to perform compliance checking based on all laws and regulations corresponding to the location information, thereby improving the speed of obtaining compliance check results.

[0065] In some embodiments, before determining the laws and regulations corresponding to the location information through the rule engine, the following steps may be performed:

[0066] Obtain the laws and regulations corresponding to at least one region;

[0067] Analyze laws and regulations through a rule engine to obtain a legal and regulatory decision tree corresponding to at least one region;

[0068] The rules engine determines the laws and regulations corresponding to the location information. The rules engine then performs compliance checks on the current user information based on the laws and regulations corresponding to the location information, and obtains compliance test results, including:

[0069] Determine the legal and regulatory decision tree corresponding to the location information through the rule engine;

[0070] Through the rule engine, the current user information is checked for compliance based on the legal and regulatory decision tree corresponding to the location information to obtain the compliance test results.

[0071] In an embodiment of the present application, laws and regulations corresponding to at least one region are obtained, and the laws and regulations are analyzed through a rule engine to obtain a legal and regulatory decision tree corresponding to at least one region, and the legal and regulatory decision tree corresponding to the location information is determined through the rule engine; through the rule engine, compliance testing is performed on the current user information based on the legal and regulatory decision tree corresponding to the location information to obtain a compliance testing result, thereby realizing the formation of a decision tree of laws and regulations, so as to increase the speed of compliance testing on the current user information.

[0072] In this case, one location information can correspond to one decision tree, that is, multiple laws and regulations in a region correspond to one decision tree, or one law and regulation can correspond to one decision tree. When one law and regulation corresponds to one decision tree, the rule engine determines the law and regulation decision tree corresponding to the location information. The rule engine then performs compliance testing on the current user information based on the law and regulation decision tree corresponding to the location information, obtaining compliance testing results, including:

[0073] Determine at least two legal and regulatory decision trees corresponding to the location information through a rule engine;

[0074] Determine the type corresponding to the field;

[0075] Selecting a legal and regulatory decision tree that matches the type from at least two legal and regulatory decision trees to obtain a target legal and regulatory decision tree;

[0076] According to the target laws and regulations decision tree, the current user information is subject to compliance testing to obtain compliance testing results.

[0077] The type of a field can be the root node of a legal and regulatory decision tree. The type of a field can refer to the type of user information associated with the field. For example, if the user information is age A and time T1, the field type is age, and the root node of the target legal and regulatory decision tree is age. Another example is if the user information is gender and time T2, the field type is gender, and the root node of the target legal and regulatory decision tree is gender.

[0078] In an embodiment of the present application, one law or regulation corresponds to one decision tree, and at least two law or regulation decision trees corresponding to the location information are determined through a rule engine; the type corresponding to the field is determined; from the at least two law or regulation decision trees, the law or regulation decision tree that matches the type is screened out to obtain a target law or regulation decision tree; based on the target law or regulation decision tree, the current user information is subjected to compliance detection to obtain a compliance detection result, so that when there are many laws and regulations, the target law or regulation decision tree can be obtained quickly, thereby improving the speed of obtaining the compliance detection result based on the target law or regulation decision tree.

[0079] Optionally, since there may be multiple fields corresponding to the user information required to display the page corresponding to the instruction, the type of the field can be determined according to the priority of the field, that is, the root node of the legal and regulatory decision tree can be determined based on the multiple sub-user information to be verified in the current user information.

[0080] For example, if the fields include age and mobile phone number, and age has a higher priority than mobile phone number, then age will be used as the field type. For another example, if the fields include ID number and time, and ID number has a higher priority than mobile phone number, then ID number will be used as the field type.

[0081] In other embodiments, compliance testing is performed on the current user information according to the target legal and regulatory decision tree to obtain compliance testing results, including:

[0082] Through the rule engine, the current user information is split to obtain multiple sub-user information to be verified;

[0083] Determine the target position corresponding to each sub-user information to be verified in the target legal and regulatory decision tree;

[0084] According to the target position, the legal and regulatory content corresponding to each sub-user information to be verified is found in the target legal and regulatory decision tree; the sub-user information to be verified is subjected to compliance detection according to the legal and regulatory content corresponding to each sub-user information to be verified, and a compliance detection result is obtained.

[0085] Since there are multiple legal and regulatory contents in one law or regulation, when generating a legal and regulatory decision tree, one law or regulation can be stored in a child node in the legal and regulatory decision tree. Then, after obtaining the current user information, the current user information is split to obtain multiple sub-user information to be verified, and the target position corresponding to each sub-user information to be verified in the target legal and regulatory decision tree is determined; the legal and regulatory content corresponding to each sub-user information to be verified is found in the target legal and regulatory decision tree according to the target position; and compliance testing is performed on the sub-user information to be verified according to the legal and regulatory content corresponding to each sub-user information to be verified to obtain compliance testing results. This eliminates the need to traverse the entire target legal and regulatory decision tree when performing compliance testing on each sub-user information to be verified, thereby improving the speed of obtaining compliance testing results.

[0086] For example, the current user information includes age and time. The root node of the target laws and regulations decision tree is age. The first child node is greater than eighteen years old, and the second child node is bachelor's degree or above. The current user information is A years old, a graduate student. The sub-user information to be verified is A years old and a graduate student. The target position corresponding to A years old is the first child node, and the target position corresponding to bachelor's degree or above is the second child node. The legal and regulatory content corresponding to A years old is greater than eighteen years old, and the legal and regulatory content corresponding to graduate students is bachelor's degree or above. Since A years old is greater than eighteen years old and graduate students have a bachelor's degree or above, the compliance detection result of the current user information is compliant.

[0087] Optionally, the terminal can first store the node type corresponding to each child node in the legal and regulatory decision tree in the rule engine. The node type corresponding to each child node can be determined based on the legal and regulatory content corresponding to each child node. For example, if the child node is over 18 years old, the node type corresponding to the child node is age. For example, if the child node has a bachelor's degree or above, the node type corresponding to the byte is academic qualification.

[0088] Then, after obtaining the sub-user information to be verified, the terminal uses the rule engine to set the child node corresponding to the node type matching the type of the sub-user information to be verified as the target location corresponding to the sub-user information to be verified.

[0089] For example, if the sub-user information to be verified is A years old, the type of the sub-user information to be verified is age. Since the node type of the first child node is also age, the target position corresponding to the sub-user information to be verified is the first child node.

[0090] S105: If the compliance detection result is compliance, the current user information is stored.

[0091] If the compliance check result is compliant, the current user information will be stored. If the current user information is not compliant, the current user information will not be stored. The compliance check of the current user information is performed when the current user information is collected. The current user information is stored only when it is compliant. The current user information is filtered and stored in the database to avoid non-compliance in the application where the page corresponding to the display instruction is located.

[0092] When storing the current user information, the current user information may be directly stored, or, in order to avoid leakage of the user information and ensure the security of the user information, the current user information may be encrypted to obtain the encrypted current user information, and then the encrypted current user information may be stored.

[0093] The method for encrypting the current user information can be set according to actual conditions. For example, a two-way encryption algorithm or a one-way encryption algorithm can be used to encrypt the current user information. This embodiment of the present application does not limit this.

[0094] Optionally, the current user information may be stored in a database.

[0095] After the current user information is stored in the database, the business personnel of the application program where the page corresponding to the display instruction is located can query the current user information in the database.

[0096] Optionally, the field query permissions of each business person can be limited. When the business person's instructions are obtained, only the sub-user information corresponding to the fields in the business person's field query permissions in the current user information is displayed, so as to finely control the query permissions of the current user information and reduce the risk of leakage of the current user information.

[0097] Optionally, each business operator's query record can be saved in a log record to facilitate operation tracing and quickly determine the cause of information leakage when it occurs. For example, as shown in Figure 2.

[0098] In some embodiments, if the compliance detection result is compliance, after storing the current user information, it also includes: obtaining change information of laws and regulations;

[0099] Through the rule engine, the stored current user information is checked for compliance based on the change information;

[0100] If the stored current user information is not compliant, the stored current user information is deleted.

[0101] Laws and regulations are time-sensitive. At time T1, the compliance check result of the current user information may be compliant. At time T2, due to changes in laws and regulations, the compliance check result of the current user information may be non-compliant. Therefore, in the embodiment of the present application, if the compliance check result is compliant, the current user information is stored, and then the change information of the laws and regulations is obtained; through the rule engine, the stored current user information is checked for compliance based on the change information; if the stored current user information is non-compliant, the stored current user information is deleted, thereby further reducing the phenomenon of non-compliance in the application where the page corresponding to the display instruction is located. For example, as shown in Figure 3.

[0102] As can be seen from the above, in an embodiment of the present application, a display instruction is obtained, and the field corresponding to the user information that needs to be obtained for the page corresponding to the display instruction is determined; the field is displayed, and in response to the current user's confirmation operation on the displayed field, the current user information corresponding to the current user is obtained; the current user's location information is obtained, and the laws and regulations corresponding to the location information are determined through the rule engine; through the rule engine, the current user information is subjected to compliance testing according to the laws and regulations corresponding to the location information to obtain a compliance testing result; if the compliance testing result is compliant, the current user information is stored to implement compliance testing of the current user information, thereby improving the accuracy of the obtained compliance testing result, and performing compliance testing on the current user information when collecting the current user information, and storing the current user information only when it is compliant, thereby implementing filtering and warehousing of the current user information, and avoiding non-compliance of the application where the page corresponding to the display instruction is located.

[0103] To facilitate better implementation of the compliance detection method provided in the embodiment of the present application, the embodiment of the present application also provides a device based on the above-mentioned compliance detection method. The meanings of the terms are the same as those in the above-mentioned compliance detection method, and the specific implementation details can be referred to the description in the method embodiment.

[0104] For example, as shown in FIG4 , the compliance detection device may include:

[0105] The acquisition module 401 is used to acquire a display instruction and determine a field corresponding to user information that needs to be acquired on the page corresponding to the display instruction.

[0106] The display module 402 is configured to display fields and obtain current user information corresponding to the current user in response to a confirmation operation of the current user on the displayed fields.

[0107] The determination module 403 is used to obtain the location information of the current user and determine the laws and regulations corresponding to the location information through a rule engine.

[0108] The detection module 404 is used to perform compliance detection on the current user information according to the laws and regulations corresponding to the location information through a rule engine to obtain a compliance detection result.

[0109] The storage module 405 is configured to store the current user information if the compliance detection result is compliance.

[0110] Optionally, the compliance detection device further includes:

[0111] Analysis module, which performs:

[0112] Obtain the laws and regulations corresponding to at least one region;

[0113] The laws and regulations are analyzed through the rule engine to obtain a legal and regulatory decision tree corresponding to at least one region.

[0114] Accordingly, the detection module 404 is specifically configured to perform:

[0115] Determine the legal and regulatory decision tree corresponding to the location information through the rule engine;

[0116] Through the rule engine, the current user information is checked for compliance based on the legal and regulatory decision tree corresponding to the location information to obtain the compliance test results.

[0117] Optionally, each law or regulation corresponds to a decision tree, and the detection module 404 is specifically configured to execute:

[0118] Determine at least two legal and regulatory decision trees corresponding to the location information through a rule engine;

[0119] Determine the type corresponding to the field;

[0120] Selecting a legal and regulatory decision tree that matches the type from at least two legal and regulatory decision trees to obtain a target legal and regulatory decision tree;

[0121] According to the target laws and regulations decision tree, the current user information is subject to compliance testing to obtain compliance testing results.

[0122] Optionally, the detection module 404 is specifically configured to perform:

[0123] Through the rule engine, the current user information is split to obtain multiple sub-user information to be verified;

[0124] Determine the target position corresponding to each sub-user information to be verified in the target legal and regulatory decision tree;

[0125] According to the target position, the legal and regulatory content corresponding to each sub-user information to be verified is found in the target legal and regulatory decision tree; the sub-user information to be verified is subjected to compliance detection according to the legal and regulatory content corresponding to each sub-user information to be verified, and a compliance detection result is obtained.

[0126] Optionally, the display module 402 is specifically configured to execute:

[0127] According to the laws and regulations corresponding to the location information, check whether the user information corresponding to the field is compliant;

[0128] If the user information corresponding to the field is not compliant, the field is updated according to the laws and regulations corresponding to the location information to obtain the target field;

[0129] Display target fields;

[0130] In response to a confirmation operation of the current user on the displayed target field, current user information corresponding to the current user is acquired.

[0131] Optionally, the storage module 405 is specifically configured to execute:

[0132] If the compliance check result is compliance, the current user information is encrypted to obtain the encrypted current user information;

[0133] The encrypted current user information is stored.

[0134] Optionally, the compliance detection device further includes:

[0135] Update module, which performs:

[0136] Obtain information on changes in laws and regulations;

[0137] Through the rule engine, the stored current user information is checked for compliance based on the change information;

[0138] If the stored current user information is not compliant, the stored current user information is deleted.

[0139] During specific implementation, the above modules can be implemented as independent entities, or they can be arbitrarily combined and implemented as the same or several entities. The specific implementation methods and corresponding beneficial effects of the above modules can be found in the previous method embodiments and will not be repeated here.

[0140] The present application also provides an electronic device, which may be a server or a terminal, etc. As shown in FIG5 , it shows a schematic diagram of the structure of the electronic device involved in the embodiment of the present application. Specifically:

[0141] The electronic device may include components such as a processor 501 with one or more processing cores, a memory 502 with one or more computer-readable storage media, a power supply 503, and an input unit 504. Those skilled in the art will appreciate that the electronic device structure shown in FIG5 does not limit the electronic device and may include more or fewer components than shown, or combine certain components, or arrange the components differently.

[0142] The processor 501 is the control center of the electronic device. It connects all parts of the electronic device using various interfaces and circuits. It executes the various functions of the electronic device and processes data by running or executing computer programs and / or modules stored in the memory 502 and accessing data stored in the memory 502. Optionally, the processor 501 may include one or more processing cores. Preferably, the processor 501 may integrate an application processor and a modem processor. The application processor primarily handles the operating system, user interface, and application programs, while the modem processor primarily handles wireless communications. It is understood that the modem processor may not be integrated into the processor 501.

[0143] The memory 502 can be used to store computer programs and modules. The processor 501 executes various functional applications and data processing by running the computer programs and modules stored in the memory 502. The memory 502 may mainly include a program storage area and a data storage area, wherein the program storage area may store an operating system, a computer program required for at least one function (such as a sound playback function, an image playback function, etc.), etc.; the data storage area may store data created according to the use of the electronic device, etc. In addition, the memory 502 may include a high-speed random access memory, and may also include a non-volatile memory, such as at least one disk storage device, a flash memory device, or other volatile solid-state storage device. Accordingly, the memory 502 may also include a memory controller to provide the processor 501 with access to the memory 502.

[0144] The electronic device also includes a power supply 503 for supplying power to various components. Preferably, the power supply 503 can be logically connected to the processor 501 via a power management system, thereby enabling the power management system to manage charging, discharging, and power consumption. The power supply 503 can also include one or more DC or AC power supplies, a recharging system, a power failure detection circuit, a power converter or inverter, a power status indicator, and other arbitrary components.

[0145] The electronic device may further include an input unit 504, which may be used to receive input digital or character information and generate keyboard, mouse, joystick, optical or trackball signal input related to user settings and function control. Although not shown, the electronic device may also include a display unit, etc., which will not be described in detail here. Specifically, in this embodiment, the processor 501 in the electronic device will load the executable files corresponding to the processes of one or more computer programs into the memory 502 according to the following instructions, and the processor 501 will run the computer programs stored in the memory 502 to implement various functions, such as:

[0146] Obtain a display instruction and determine the fields corresponding to the user information to be obtained on the page corresponding to the display instruction;

[0147] Display fields, and in response to the current user's confirmation operation on the displayed fields, obtain current user information corresponding to the current user; obtain the current user's location information, and determine the laws and regulations corresponding to the location information through a rule engine;

[0148] Through the rule engine, the current user information is checked for compliance based on the laws and regulations corresponding to the location information, and the compliance test results are obtained;

[0149] If the compliance check result is compliant, the current user information will be stored.

[0150] The specific implementation methods and corresponding beneficial effects of the above operations can be found in the detailed description of the compliance detection method above, which will not be repeated here.

[0151] Those skilled in the art will appreciate that all or part of the steps in the various methods of the above embodiments may be accomplished by a computer program, or by controlling related hardware through a computer program. The computer program may be stored in a computer-readable storage medium and loaded and executed by a processor.

[0152] To this end, an embodiment of the present application provides a computer-readable storage medium storing a computer program that can be loaded by a processor to execute the steps of any compliance detection method provided in the embodiment of the present application. For example, the computer program can execute the following steps:

[0153] Obtain a display instruction and determine the fields corresponding to the user information to be obtained on the page corresponding to the display instruction;

[0154] Display fields, and in response to the current user's confirmation operation on the displayed fields, obtain current user information corresponding to the current user; obtain the current user's location information, and determine the laws and regulations corresponding to the location information through a rule engine;

[0155] Through the rule engine, the current user information is checked for compliance based on the laws and regulations corresponding to the location information, and the compliance test results are obtained;

[0156] If the compliance check result is compliant, the current user information will be stored.

[0157] The specific implementation methods and corresponding beneficial effects of the above operations can be found in the previous embodiments and will not be repeated here. The computer-readable storage medium may include: a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, etc.

[0158] Since the computer program stored in the computer-readable storage medium can execute the steps of any compliance detection method provided in the embodiments of the present application, the beneficial effects that can be achieved by any compliance detection method provided in the embodiments of the present application can be achieved. Please refer to the previous embodiments for details and will not be repeated here.

[0159] According to one aspect of the present application, a computer program product or computer program is provided, the computer program product or computer program including computer instructions stored in a computer-readable storage medium. A processor of a computer device reads the computer instructions from the computer-readable storage medium and executes the computer instructions, causing the computer device to perform the above-described compliance detection method.

[0160] The above is a detailed introduction to a compliance detection method, device, electronic device and computer storage medium provided in the embodiments of the present application. Specific examples are used in this article to illustrate the principles and implementation methods of the present application. The description of the above embodiments is only used to help understand the method of the present application and its core ideas. At the same time, for technical personnel in this field, based on the ideas of the present application, there will be changes in the specific implementation methods and application scope. In summary, the content of this specification should not be understood as a limitation on the present application.

Claims

1. A compliance detection method, wherein: include: Obtain a display instruction, and determine a field corresponding to the user information to be obtained on the page corresponding to the display instruction; Displaying the field, and in response to a confirmation operation of the current user on the displayed field, acquiring current user information corresponding to the current user; Obtaining the location information of the current user, and determining the laws and regulations corresponding to the location information through a rule engine; By means of the rule engine, according to the laws and regulations corresponding to the location information, the current user information is subjected to compliance detection to obtain a compliance detection result; If the compliance detection result is compliant, the current user information is stored.

2. The compliance detection method according to claim 1, wherein: Before determining the laws and regulations corresponding to the location information by the rule engine, the method further includes: Obtain the laws and regulations corresponding to at least one region; The laws and regulations are analyzed by a rule engine to obtain a legal and regulatory decision tree corresponding to the at least one region.

3. The compliance detection method according to claim 2, wherein: The determining, by means of a rule engine, the laws and regulations corresponding to the location information, and performing compliance detection on the current user information according to the laws and regulations corresponding to the location information by means of the rule engine to obtain a compliance detection result, includes: Determine, by the rule engine, a legal and regulatory decision tree corresponding to the location information; Through the rule engine, according to the legal and regulatory decision tree corresponding to the location information, The current user information is used for compliance detection to obtain the compliance detection result.

4. The compliance detection method according to claim 3, wherein: One law or regulation corresponds to one decision tree. The rule engine is used to determine the decision tree of the law or regulation corresponding to the location information. The rule engine is used to perform compliance detection on the current user information according to the decision tree of the law or regulation corresponding to the location information to obtain a compliance detection result, including: Determine at least two legal and regulatory decision trees corresponding to the location information through a rule engine; Determine the type corresponding to the field; Selecting a legal and regulatory decision tree that matches the type from at least two legal and regulatory decision trees to obtain a target legal and regulatory decision tree; According to the target laws and regulations decision tree, the current user information is subjected to compliance detection to obtain a compliance detection result.

5. The compliance detection method according to claim 4, wherein: The step of performing compliance detection on the current user information according to the target laws and regulations decision tree to obtain a compliance detection result includes: By using the rule engine, the current user information is split to obtain a plurality of sub-user information to be verified; Determine the target position corresponding to each sub-user information to be verified in the target legal and regulatory decision tree; Finding the legal and regulatory content corresponding to each sub-user information to be verified in the target legal and regulatory decision tree according to the target location; A compliance check is performed on the sub-user information to be checked according to the content of laws and regulations corresponding to each sub-user information to be checked to obtain a compliance check result.

6. The compliance detection method according to claim 1, wherein: The displaying of the field, and in response to a confirmation operation of the current user on the displayed field, obtaining current user information corresponding to the current user, includes: According to the laws and regulations corresponding to the location information, detecting whether the user information corresponding to the field is compliant; If the user information corresponding to the field is not compliant, the field is updated according to the laws and regulations corresponding to the location information to obtain the target field; displaying the target field; In response to a confirmation operation of the current user on the displayed target field, current user information corresponding to the current user is acquired.

7. The compliance detection method according to claim 1, wherein: If the compliance detection result is compliance, storing the current user information includes: If the compliance detection result is compliance, encrypting the current user information to obtain encrypted current user information; The encrypted current user information is stored.

8. The compliance detection method according to any one of claims 1 to 7, wherein: If the compliance detection result is compliance, after storing the current user information, the method further includes: Obtain information on changes in laws and regulations; By means of the rule engine, compliance detection is performed on the stored current user information according to the change information; If the stored current user information is not compliant, the stored current user information is deleted.

9. The compliance detection method according to claim 1, wherein: The obtaining the current user information corresponding to the current user includes: Only the user information required by the page corresponding to the display instruction is obtained.

10. The compliance detection method according to claim 1, wherein: The method also includes: when the rule engine is used to detect whether the user information collected and stored by multiple applications is compliant, the types of the multiple applications can be the same or different.

11. The compliance detection method according to claim 1, wherein: The compliance detection of the current user information is performed by the rule engine according to the laws and regulations corresponding to the location information to obtain a compliance detection result, including: Obtaining the target type of the application where the page corresponding to the display instruction is located through the rule engine; filtering out the laws and regulations matching the target type from the laws and regulations corresponding to the location information to obtain the target laws and regulations; According to the target laws and regulations, the current user information is subject to compliance testing to obtain compliance testing results.

12. The compliance detection method according to claim 5, wherein: The step of determining a target position corresponding to each sub-user information to be verified in the target law and regulation decision tree includes: The node type corresponding to each sub-node in the legal and regulatory decision tree is stored in the rule engine, and the node type corresponding to each sub-node can be determined according to the legal and regulatory content corresponding to each sub-node; After the sub-user information to be verified is obtained, the rule engine uses a sub-node corresponding to a node type that matches the type of the sub-user information to be verified as a target position corresponding to the sub-user information to be verified.

13. The compliance detection method according to claim 1, wherein: If the compliance detection result is compliance, after storing the current user information, the method further includes: Store the current user information in the database; When a query instruction of a business person is obtained, only the sub-user information corresponding to the fields in the field query permission of the business person in the current user information is displayed.

14. A compliance detection device, wherein: include: An acquisition module, used to acquire a display instruction and determine a field corresponding to user information to be acquired on a page corresponding to the display instruction; A display module, used to display the fields, and in response to a confirmation operation of the current user on the displayed fields, obtain current user information corresponding to the current user; A determination module, used to obtain the location information of the current user and determine the laws and regulations corresponding to the location information through a rule engine; A detection module, configured to perform compliance detection on the current user information according to the laws and regulations corresponding to the location information through the rule engine, and obtain a compliance detection result; A storage module is used to store the current user information if the compliance detection result is compliant.

15. The compliance detection device according to claim 14, wherein: The detection module comprises: Obtain the laws and regulations corresponding to at least one region; The laws and regulations are analyzed by a rule engine to obtain a legal and regulatory decision tree corresponding to the at least one region.

16. The compliance detection device according to claim 15, wherein: The detection module is specifically used for: Determine, by the rule engine, a legal and regulatory decision tree corresponding to the location information; Through the rule engine, according to the legal and regulatory decision tree corresponding to the location information, the current user information is subjected to compliance detection to obtain a compliance detection result.

17. The compliance detection device according to claim 16, wherein: One law or regulation corresponds to one decision tree. The detection module is also used for: Determine at least two legal and regulatory decision trees corresponding to the location information through a rule engine; Determine the type corresponding to the field; Selecting a legal and regulatory decision tree that matches the type from at least two legal and regulatory decision trees to obtain a target legal and regulatory decision tree; According to the target laws and regulations decision tree, the current user information is subjected to compliance detection to obtain a compliance detection result.

18. The compliance detection device according to claim 17, wherein: The detection module is also specifically used for: By using the rule engine, the current user information is split to obtain a plurality of sub-user information to be verified; Determine the target position corresponding to each sub-user information to be verified in the target legal and regulatory decision tree; Finding the legal and regulatory content corresponding to each sub-user information to be verified in the target legal and regulatory decision tree according to the target location; The sub-user information to be verified is verified according to the legal and regulatory content corresponding to each sub-user information to be verified. The sub-user information is subjected to compliance detection to obtain compliance detection results.

19. An electronic device, wherein: It comprises a processor and a memory, the memory stores a computer program, and the processor is used to run the computer program in the memory to execute the compliance detection method according to any one of claims 1 to 13.

20. A computer-readable storage medium, wherein: The computer-readable storage medium stores a computer program, and the computer program is suitable for being loaded by a processor to execute the compliance detection method according to any one of claims 1 to 13.

Images