Data security evaluation processing

Abstract

Embodiments of the present description provide a data security evaluation processing method and apparatus. The data security evaluation processing method comprises: when receiving an evaluation request for performing data security evaluation sent by an institution terminal, generating question-answer interaction data for performing data security evaluation on an institution, and performing question-answer interaction processing on the basis of the question-answer interaction data and the institution terminal; on the basis of question-answer confirmation data obtained by question-answer interaction processing, performing secret data security evaluation processing on the institution to obtain an evaluation result; and generating an evaluation result display page for configuring a data security interface, and sending the evaluation result display page to the institution terminal, so as to perform secret data security processing by means of the data security interface.

Description

Data security assessment and processing Technical Field

[0001] This document relates to the field of data processing technology, and in particular to a method and device for evaluating and processing data preservation. Background Art

[0002] With the development of Internet technology, computers and the Internet have become an important part of users' lives and have gradually penetrated into every corner of life. As a result, more and more online services have emerged. For example, more and more companies choose to store their trade secrets through blockchain. Among them, since corporate trade secrets are the most important intangible assets of a company, the leakage of trade secrets will lead to the loss of core technology, loss of customer information and other operational risks. Therefore, doing a good job in protecting trade secrets has become a focus of increasing attention for companies. Summary of the Invention

[0003] One or more embodiments of the present specification provide a data preservation evaluation and processing method, which is applied to a server, and the method includes: receiving an evaluation request for data preservation evaluation sent by an institution terminal, and the evaluation request is submitted after institutional authentication of the institution corresponding to the institution terminal; generating question and answer interaction data for performing the data preservation evaluation on the institution, and performing question and answer interaction processing with the institution terminal based on the question and answer interaction data; performing secret data preservation evaluation processing on the institution based on the question and answer confirmation data obtained from the question and answer interaction processing, and obtaining an evaluation result; generating an evaluation result display page for configuring a data preservation interface and sending it to the institution terminal, so as to perform secret data preservation processing through the data preservation interface.

[0004] One or more embodiments of the present specification provide another data preservation evaluation and processing method, which is applied to an institution terminal, and the method includes: applying for institution authentication based on the obtained institution authentication information, and obtaining the authentication result; when the authentication result is that the authentication is passed, obtaining an evaluation request for data preservation evaluation and sending it to the server; cooperating with the server to perform question and answer interaction processing based on the question and answer interaction data generated by the server for performing the data preservation evaluation on the institution; receiving and displaying the evaluation result display page of the configuration data preservation interface sent by the server, wherein the evaluation result displayed on the evaluation result display page is obtained after the server performs the secret data preservation evaluation processing on the institution based on the question and answer confirmation data.

[0005] One or more embodiments of the present specification provide a data preservation assessment and processing device, which runs on a server, and the device includes: a request receiving module, configured to receive an assessment request for data preservation assessment sent by an institution terminal, and the assessment request is submitted after institutional authentication of the institution corresponding to the institution terminal; an interactive question and answer processing module, configured to generate question and answer interaction data for performing the data preservation assessment on the institution, and perform question and answer interaction processing with the institution terminal based on the question and answer interaction data; an assessment module, configured to perform secret data preservation assessment processing on the institution based on question and answer confirmation data obtained from the question and answer interaction processing, and obtain an assessment result; a data preservation processing module, configured to generate an assessment result display page for configuring a data preservation interface and send it to the institution terminal, so as to perform secret data preservation processing through the data preservation interface.

[0006] One or more embodiments of the present specification provide another data preservation assessment and processing device, which runs on an institution terminal, and the device includes: an authentication module, configured to apply for institution authentication based on the obtained institution authentication information, and obtain an authentication result; when the authentication result is authentication passed, running an assessment request acquisition module, the assessment request acquisition module is configured to obtain an assessment request for data preservation assessment and send it to a server; a question-and-answer interaction cooperation module is configured to cooperate with the server to perform question-and-answer interaction processing based on question-and-answer interaction data generated by the server for performing the data preservation assessment on the institution; an assessment result display module is configured to receive and display an assessment result display page of the configuration data preservation interface sent by the server, the assessment result displayed on the assessment result display page is obtained after the server performs assessment processing on the confidential data preservation of the institution based on the question-and-answer confirmation data.

[0007] One or more embodiments of the present specification provide a server, comprising: a processor; and a memory configured to store computer-executable instructions, wherein the computer-executable instructions, when executed, cause the processor to: receive an assessment request for data security assessment sent by an institution terminal, wherein the assessment request is submitted after institutional authentication of the institution corresponding to the institution terminal; generate question-and-answer interaction data for performing the data security assessment on the institution, and perform question-and-answer interaction processing with the institution terminal based on the question-and-answer interaction data; perform secret data security assessment processing on the institution based on question-and-answer confirmation data obtained from the question-and-answer interaction processing to obtain an assessment result; generate an assessment result display page for configuring a data security interface and send it to the institution terminal, so as to perform secret data security processing through the data security interface.

[0008] One or more embodiments of the present specification provide an institution terminal, comprising: a processor; and a memory configured to store computer-executable instructions, wherein the computer-executable instructions, when executed, cause the processor to: apply for institution authentication based on the acquired institution authentication information, and obtain an authentication result; if the authentication result is that the authentication is passed, obtain an assessment request for performing a data security assessment and send it to a server; cooperate with the server to perform question-and-answer interaction processing based on question-and-answer interaction data generated by the server for performing the data security assessment on the institution; receive and display an assessment result display page for configuring a data security interface sent by the server, wherein the assessment result displayed on the assessment result display page is obtained after the server performs an assessment processing on the confidential data security of the institution based on the question-and-answer confirmation data.

[0009] One or more embodiments of the present specification provide a storage medium for storing computer-executable instructions, which implement the following process when executed by a processor: receiving an assessment request for data preservation assessment sent by an institution terminal, the assessment request being submitted after institutional authentication of the institution corresponding to the institution terminal; generating question-and-answer interaction data for performing the data preservation assessment on the institution, and performing question-and-answer interaction processing with the institution terminal based on the question-and-answer interaction data; performing secret data preservation assessment processing on the institution based on the question-and-answer confirmation data obtained from the question-and-answer interaction processing to obtain an assessment result; generating an assessment result display page for configuring a data preservation interface and sending it to the institution terminal to perform secret data preservation processing through the data preservation interface.

[0010] One or more embodiments of the present specification provide another storage medium for storing computer-executable instructions, which implement the following process when executed by a processor: applying for institutional certification based on the obtained institutional certification information and obtaining the certification result; when the certification result is that the certification is passed, obtaining an assessment request for data preservation assessment and sending it to the server; cooperating with the server to perform question and answer interaction processing based on the question and answer interaction data generated by the server for performing the data preservation assessment on the institution; receiving and displaying the assessment result display page of the configuration data preservation interface sent by the server, the assessment result displayed on the assessment result display page is obtained after the server performs the confidential data preservation assessment processing on the institution based on the question and answer confirmation data. BRIEF DESCRIPTION OF THE DRAWINGS

[0011] FIG1 is a schematic diagram of an implementation environment of a data preservation evaluation and processing method provided by one or more embodiments of this specification.

[0012] FIG2 is a processing flow chart of a data preservation evaluation and processing method provided by one or more embodiments of this specification.

[0013] FIG3 is a schematic diagram of an institution authentication page provided in one or more embodiments of this specification.

[0014] FIG4 is a schematic diagram of an institution authentication code provided in one or more embodiments of this specification.

[0015] FIG5 is a schematic diagram of an authentication homepage provided by one or more embodiments of this specification.

[0016] FIG6 is a schematic diagram of an authorization agreement signing page provided in one or more embodiments of this specification.

[0017] FIG7 is a schematic diagram of a question-and-answer interaction page provided in one or more embodiments of this specification.

[0018] FIG8 is a schematic diagram of an evaluation result provided by one or more embodiments of this specification.

[0019] FIG9 is a processing flow chart of a data preservation evaluation and processing method applied to a confidential data preservation scenario provided by one or more embodiments of this specification.

[0020] FIG10 is a flowchart of another data preservation evaluation and processing method provided by one or more embodiments of this specification.

[0021] FIG11 is a schematic diagram of an embodiment of a data preservation evaluation and processing device provided by one or more embodiments of this specification.

[0022] FIG12 is a schematic diagram of another embodiment of a data preservation evaluation and processing device provided by one or more embodiments of this specification.

[0023] FIG13 is a schematic diagram of the structure of a server provided in one or more embodiments of this specification.

[0024] FIG14 is a schematic diagram of the structure of an institutional terminal provided in one or more embodiments of this specification. DETAILED DESCRIPTION

[0025] In order to help users in this technical field better understand the technical solutions in one or more embodiments of this specification, the technical solutions in one or more embodiments of this specification will be clearly and completely described below in conjunction with the drawings in one or more embodiments of this specification. Obviously, the described embodiments are only part of the embodiments of this specification, not all of the embodiments. Based on one or more embodiments of this specification, all other embodiments obtained by users of ordinary skill in the art without making any creative efforts should fall within the scope of protection of this document.

[0026] The data preservation evaluation and processing method provided in one or more embodiments of this embodiment can be applied to the implementation environment of data preservation evaluation and processing. Referring to Figure 1, the implementation environment at least includes: a server 101, an institutional terminal 102, and in addition, the implementation environment may also include a question-and-answer interaction library 103.

[0027] The server 101 may be one or more servers, or a server cluster consisting of several servers. The server 101 may generate question-and-answer interaction data for evaluating the data security of an organization, perform question-and-answer interaction processing with the organization terminal 102 based on the question-and-answer interaction data, and perform confidential data security evaluation processing on the organization based on the question-and-answer confirmation data submitted by the organization terminal 102, and transmit the evaluation results to the organization terminal 102.

[0028] The institution terminal 102 may be an enterprise employee terminal, an enterprise terminal, a smartphone, a tablet computer, an e-book reader, a wearable device, a smartwatch, or a device that performs information exchange and image acquisition based on AR (Augmented Reality) / VR (Virtual Reality). The institution terminal 102 may cooperate with the server 101 to process the question-and-answer interaction based on the question-and-answer interaction data generated by the server 101 for the institution's data preservation assessment, send question-and-answer confirmation data to the server 101, and display the assessment result display page sent by the server 101.

[0029] The question-answer interaction library 103 may store interactive questions and candidate answers to the interactive questions.

[0030] In this implementation environment, after the server 101 receives the evaluation request for data preservation evaluation sent by the institution terminal 102, it generates question-and-answer interaction data for the data preservation evaluation of the institution, and performs question-and-answer interaction processing with the institution terminal 102 based on the question-and-answer interaction data. Based on the question-and-answer confirmation data obtained from the question-and-answer interaction processing, it performs an evaluation processing on the confidential data preservation of the institution, obtains the evaluation result, generates an evaluation result display page for the configuration data preservation interface, and sends it to the institution terminal 102 to perform confidential data preservation processing through the data preservation interface.

[0031] One or more embodiments of a data preservation evaluation and processing method provided in this specification are as follows.

[0032] 2 , the data preservation evaluation and processing method provided in this embodiment specifically includes steps S202 to S208 .

[0033] Step S202: receiving a request for data security assessment sent by an institution terminal.

[0034] The data preservation evaluation and processing method provided in this embodiment can be applied to a server, and cooperates with the data preservation evaluation and processing method applied to an institutional terminal provided below during the execution process. Therefore, when reading this embodiment, please refer to the corresponding content of the data preservation evaluation and processing method applied to an institutional terminal provided below, and when reading the following embodiments, you can also refer to the corresponding content of this embodiment.

[0035] In this embodiment, data preservation refers to the protection of data. Accordingly, the data preservation assessment is to assess whether the protection behavior of the data is appropriate, or the data preservation assessment can also be to assess whether the storage environment of the data is safe, wherein the data can be confidential data, and the data preservation assessment can also be a confidential data preservation assessment.

[0036] In order to improve the security of data preservation assessment of institutions, institutions are authenticated in advance to verify the legal identity of the institutions. Specifically, institution authentication information can be collected by sending an institution authentication page to the institution terminal, and the institution is authenticated based on the institution authentication information. In an optional implementation provided by this embodiment, the institution is authenticated in the following manner: receiving an institution authentication application sent by the institution terminal, and sending an institution authentication page to the institution terminal; obtaining the institution authentication information collected based on the institution authentication page and returned by the institution terminal, and sending the authentication result to the institution terminal after authenticating the institution based on the institution authentication information.

[0037] Specifically, after receiving the institution authentication application sent by the institution terminal, the institution authentication page is sent to the institution terminal, the institution authentication information returned by the institution terminal based on the institution authentication page is obtained, and after performing institution authentication of the institution based on the institution authentication information, the authentication result is sent to the institution terminal. Optionally, the evaluation request is submitted after the institution corresponding to the institution terminal has been authenticated.

[0038] For example, after receiving the institutional authentication application sent by the institutional terminal, the institutional authentication page shown in Figure 3 is sent to the institutional terminal, and after obtaining the enterprise name, enterprise logo, corporate legal person name, and legal person identity logo returned by the institutional terminal based on the collection of the institutional authentication page, an institutional authentication code as shown in Figure 4 is generated. The institution enters the authentication homepage as shown in Figure 5 by scanning the institutional authentication code, and the user jumps to the authorization agreement signing page as shown in Figure 6 by clicking the "Start Authentication" button on the page to authorize the acquisition of the user's user information. The server performs institutional authentication of the institution based on the user's user information and the institutional authentication information collected through the institutional authentication page, and sends the authentication result to the institutional terminal.

[0039] Step S204: generating question-answer interaction data for performing the data preservation assessment on the institution, and performing question-answer interaction processing with the institution terminal based on the question-answer interaction data.

[0040] After receiving the evaluation request for data preservation evaluation sent by the institution terminal, in this step, question and answer interaction data for data preservation evaluation of the institution is generated based on the evaluation request, and question and answer interaction processing is performed with the institution terminal based on the question and answer interaction data.

[0041] The question-and-answer interaction data refers to the data generated in the process of obtaining answers by asking questions. The question-and-answer interaction data may include question data and candidate answer data. For example, when evaluating the confidential data preservation of an enterprise through a questionnaire survey, questions and candidate answers can be set for the enterprise's historical protection behavior of confidential data, and the questions and candidate answers of the questionnaire can be used as question-and-answer interaction data. In addition, the question-and-answer interaction data may also include question data, such as only sending questions to the enterprise to obtain answers entered by the user. Optionally, the question-and-answer interaction data includes questionnaire data. Since the question-and-answer interaction data may contain multiple question data, the process of sending each question data to the institution terminal and obtaining answer data can be called question-and-answer interaction.

[0042] During the specific implementation process, in order to conduct an organization's data preservation assessment and make the assessment results more accurate, this embodiment provides two methods for obtaining question-and-answer interaction data.

[0043] (1) Question and answer interaction data is generated by extracting a preset number of interactive questions and candidate answers to the interactive questions from a question and answer interaction library. In an optional implementation provided by this embodiment, the question and answer interaction data is generated in the following manner: a preset number of interactive questions and candidate answers to the interactive questions are extracted from the question and answer interaction library based on the institutional information of the institution; and the question and answer interaction data is generated based on the candidate answers to the interactive questions and the interactive questions.

[0044] Specifically, the question-and-answer interaction data for data preservation assessment of an organization is generated based on a preset number of interactive questions and candidate answers extracted from a question-and-answer interaction library. The extraction rules for interactive questions and candidate answers from the question-and-answer database are determined based on the organization's organizational information. The interactive questions and candidate answers in the question-and-answer interaction library can be manually set or generated by a question-and-answer interaction model obtained through training. This is not limited in this embodiment.

[0045] For example, when the organization type included in the organization information of an organization is Type A organization, x interactive questions suitable for Type A organizations are extracted from the question-and-answer interaction library, where each interactive question may have y candidate answers, and question-and-answer interaction data is generated based on the x interactive questions and x*y candidate answers.

[0046] (2) Question and answer interaction data is generated by extracting each interactive question and the candidate answer of each interactive question from the question and answer interaction library in sequence. The following takes the extraction of the first interactive question and the candidate answer of the first interactive question from the question and answer interaction library as an example to illustrate the generation of the first question and answer interaction data. In another optional implementation provided by this embodiment, the question and answer interaction data is generated in the following manner: the first interactive question and the candidate answer of the first interactive question are extracted from the question and answer interaction library according to the institutional information of the institution; and the first question and answer interaction data is generated based on the first interactive question and the candidate answer of the first interactive question.

[0047] Specifically, in addition to the above-mentioned one-time extraction of a preset number of interactive questions and candidate answers to the interactive questions from the question-and-answer interaction library, each interactive question and candidate answer to each interactive question can also be extracted from the question-and-answer interaction library in sequence, wherein the first interactive question extracted from the question-and-answer interaction library is used as the first interactive question, and the second interactive question extracted from the question-and-answer interaction library can be determined based on the first interactive question. After the first interactive question and the candidate answer to the first interactive question are extracted randomly or in other ways, the first question-and-answer interaction data is generated based on the first interactive question and the candidate answer to the first interactive question.

[0048] In the case where each interactive question and each candidate answer to the interactive question are extracted from the question and answer interaction library in sequence as described above, in an optional implementation manner provided by this embodiment, question and answer interaction processing is performed with the institution terminal based on the question and answer interaction data in the following manner: the first interactive question and the candidate answer to the first interactive question contained in the first question and answer interaction data are sent to the institution terminal; the first confirmation answer returned by the institution terminal based on the first interactive question is obtained, and according to the first confirmation answer and the preset question extraction rules, the second interactive question and the candidate answer to the second interactive question are extracted from the question and answer interaction library as the second question and answer interaction data; and the second question and answer interaction data are sent to the institution terminal.

[0049] Specifically, after obtaining the first question-and-answer interaction data, the first interactive question and candidate answers contained in the first question-and-answer interaction data are sent to the institution terminal, the first confirmed answer returned by the institution terminal based on the first interactive question is obtained, and based on the first confirmed answer and the preset question extraction rules, the second interactive question and the candidate answers for the second interactive question are extracted from the question-and-answer interaction library as the second question-and-answer interaction data, and the second question-and-answer interaction data is sent to the institution terminal. For example, as shown in the question-and-answer interaction page shown in Figure 7, after obtaining the first question-and-answer interaction data, the server sends the first interactive question and candidate answers contained in the first question-and-answer interaction data to the institution terminal for display.

[0050] Step S206: Based on the question-answer confirmation data obtained through the question-answer interaction process, an evaluation process is performed on the confidential data preservation of the organization to obtain an evaluation result.

[0051] After the above-mentioned question-and-answer interaction data for data security assessment of the organization is generated and question-and-answer interaction processing is performed with the organization terminal based on the question-and-answer interaction data, in this step, the organization's confidential data security is assessed based on the question-and-answer confirmation data obtained from the question-and-answer interaction processing to obtain an assessment result.

[0052] The question and answer confirmation data refers to the data of the answer selected by the user. For example, a question has 4 candidate answers ABCD. When the user selects candidate answer C, the question and answer confirmation data is the data including candidate answer C.

[0053] The evaluation results include at least one of the following: an execution score, a data preservation strategy, evaluation keywords, and data preservation recommendations. The execution score refers to the score obtained by grading the organization's execution performance. For example, an organization's execution score could be x points on a 100-point scale. The data preservation strategy refers to the data preservation strategy. The evaluation keywords refer to the evaluation of the organization's current data preservation performance, such as "qualified," "unqualified," etc. The data preservation recommendations can be recommendations for the organization's data preservation, such as "recommendations for improving measures to protect trade secrets." Optionally, confidential data includes trade secrets. For example, confidential data can be non-public business information related to an enterprise's business activities that is acquired or created during the course of its operations. Secret data preservation refers to the protection of confidential data. The evaluation of an organization's confidential data preservation can assess the adequacy of the organization's confidential data protection measures. For example, the evaluation can assess whether the enterprise has properly managed its confidential personnel, whether it has properly preserved paper confidential data, and whether the equipment storing confidential data is secure.

[0054] During the specific execution process, in order to better obtain the evaluation results, by comparing the user-confirmed answer with the preset answer and calculating the execution score of the organization based on the answer comparison result, an optional implementation provided by this embodiment adopts the following method to evaluate the secret data preservation of the organization based on the question and answer confirmation data obtained from the question and answer interaction processing: determine the user-confirmed answer to the interactive question contained in the question and answer confirmation data, and compare the user-confirmed answer with the preset answer to the interactive question; calculate the execution score of the organization for the secret data preservation based on the answer comparison result.

[0055] The user-confirmed answer refers to the answer selected by the user from the candidate answers. For example, if the user selects candidate answer C from 4 candidate answers ABCD, the user-confirmed answer is C.

[0056] Specifically, after the question-and-answer interaction processing with the institution terminal, the user-confirmed answer of each interactive question contained in the question-and-answer confirmation data is determined, and each user-confirmed answer is compared with the preset answer of the corresponding interactive question. The execution score of the institution for secret data preservation is calculated based on each answer comparison result, wherein the answer comparison result of comparing the user-confirmed answer with the preset answer of the interactive question can be a consistent answer or an inconsistent answer. If the answer is consistent, the execution score of the institution for secret data preservation is calculated based on the preset score corresponding to the preset answer of the interactive question. If the answer is inconsistent, the execution score of the institution is calculated based on the difference between the preset score of the user-confirmed answer and the preset score of the preset answer.

[0057] For example, taking interactive question 1 as an example, the scores of the four candidate answers ABCD of interactive question 1 are abcd respectively, where A is the preset answer, the score corresponding to the preset answer A is a, C is the user-confirmed answer, and the score corresponding to the user-confirmed answer C is c. If the user-confirmed answer is inconsistent with the preset answer, the difference between a and c is calculated, and the execution score of the secret data preservation is calculated based on the difference between a and c.

[0058] Furthermore, after comparing the user's confirmed answer with the preset answer to the interactive question to obtain the answer comparison result, a data preservation strategy can also be generated for the interactive question for which the user has not selected the preset answer. In an optional implementation provided by this embodiment, the following method is used to evaluate the confidential data preservation of the organization based on the question and answer confirmation data obtained from the question and answer interaction processing: determine the target interactive question among the interactive questions based on the answer comparison result; and generate a data preservation strategy for the target interactive question based on the user's confirmed answer to the target interactive question.

[0059] Specifically, after comparing the user's confirmed answer with the preset answer to the interactive question to obtain the answer comparison results, if there are interactive questions with inconsistent answers, these interactive questions are identified as target interactive questions, and corresponding data preservation policies are generated based on the user's confirmed answers to the target interactive questions. The data preservation policies can be obtained by inputting the user's confirmed answers into a pre-trained policy model, or by pre-setting a data preservation policy library. After obtaining the user's confirmed answers, the data preservation policies corresponding to the user's confirmed answers are extracted from the data preservation policy library.

[0060] For example, among the x questions selected by the user, if the user's confirmed answer to the first question is inconsistent with the preset answer, the user's confirmed answer to the first question is input into the pre-trained policy model to obtain the data preservation policy for the user's confirmed answer; or, the data preservation policy corresponding to the user's confirmed answer is extracted from the data preservation policy library.

[0061] In addition, after calculating the execution score of the agency for secret data preservation based on the answer comparison result, evaluation keywords and data preservation suggestions can also be generated based on the execution score and the score threshold. In an optional implementation provided by this embodiment, the agency is evaluated for secret data preservation based on the question and answer confirmation data obtained through question and answer interaction processing in the following manner: the execution score is compared with the score threshold, and evaluation keywords are generated based on the score comparison result; based on the score comparison result, data preservation suggestions that match the score comparison result are generated.

[0062] Specifically, after the execution score of the secret data preservation is calculated by the calculation agency based on the answer comparison result, the execution score is compared with the score threshold. If the execution score is greater than or equal to the score threshold, a first evaluation keyword is generated. If the execution score is less than the score threshold, a second evaluation keyword and corresponding data preservation suggestions are generated.

[0063] For example, if the execution score of an enterprise is less than the scoring threshold, the evaluation keyword "unqualified" and the data preservation recommendation of "recommended to improve the protection measures for trade secrets" are generated; if the execution score of the enterprise is greater than or equal to the scoring threshold, the evaluation keyword "qualified" is generated. In addition, when the evaluation results include the execution score, data preservation strategy, and evaluation keywords, please refer to the evaluation result diagram shown in Figure 8.

[0064] It should be noted that the four processes of calculating and obtaining execution scores, generating data preservation strategies for target interaction problems, generating evaluation keywords, and generating data preservation recommendations that match the score comparison results can be executed separately. For the specific execution process, please refer to the above description, and this embodiment will not be repeated here.

[0065] During the specific execution process, when each interactive question and the candidate answer to each interactive question are extracted from the question-and-answer interaction library in sequence, after the question-and-answer interaction processing is performed with the institution terminal to obtain the question-and-answer confirmation data of each interactive question, an optional implementation method provided by this embodiment adopts the following method to evaluate the secret data preservation of the institution based on the question-and-answer confirmation data obtained by the question-and-answer interaction processing: according to the user confirmed answers to each interactive question contained in the question-and-answer confirmation data and the question priority of each interactive question, the execution score of the institution for the secret data preservation is calculated; the execution score is compared with the score threshold, and a data preservation strategy for the secret data preservation of the institution is generated according to the score comparison result.

[0066] Specifically, based on the user-confirmed answers to each interactive question contained in the question and answer confirmation data and the question priority of each interactive question, the execution score of the organization for confidential data preservation is calculated, and the execution score is compared with the score threshold. Based on the score comparison result, a data preservation strategy for confidential data preservation of the organization is generated.

[0067] In the process of calculating the execution score, the weight of each interactive question can be determined according to the question priority of the interactive question, and then the weighted score is obtained as the execution score according to the product of the score of the interactive question and the weight.

[0068] Step S208: Generate an evaluation result display page for configuring the data security interface and send it to the institution terminal so as to perform confidential data security processing through the data security interface.

[0069] The above-mentioned question-and-answer confirmation data obtained based on the question-and-answer interaction processing is used to evaluate the confidential data preservation of the organization. After obtaining the evaluation results, in this step, an evaluation result display page of the configuration data preservation interface is generated and sent to the organization terminal to perform confidential data preservation processing through the data preservation interface.

[0070] During the specific execution process, after sending the evaluation result display page of the configuration data preservation interface to the institution terminal, if a trigger instruction of the data preservation interface is received, the secret data input through the data preservation interface is obtained, and the secret data is stored to perform secret data preservation processing. In an optional implementation provided by this embodiment, the following method is used to perform secret data preservation processing through the data preservation interface: obtain the secret data input through the data preservation interface; send the secret data to the storage node of the blockchain for storage, and generate data evidence of the secret data.

[0071] Specifically, after sending the evaluation result display page of the configured data preservation interface to the institution terminal, if a trigger instruction of the data preservation interface is detected, the secret data input through the data preservation interface is obtained, the secret data is sent to the storage node of the blockchain for storage, and a data certificate of the secret data is generated.

[0072] Optionally, a consultation interface is also configured in the evaluation result display page. If the consultation interface is triggered, the data preservation question input through the consultation interface is obtained, and the data preservation question is input into the data preservation interaction model for question-and-answer interaction processing, and a data preservation reply is obtained and sent to the agency terminal; wherein, the data preservation interaction model uses the training data for data preservation to perform question-and-answer interaction training on the pre-trained question-and-answer interaction model; or, if the consultation interface is triggered, a consultation task is generated based on the data preservation question and assigned to the consulting service personnel, and the data preservation reply obtained by the consulting service personnel to the data preservation question is sent to the agency terminal.

[0073] In addition, the evaluation result display page is also configured with a contract signing interface. If the contract signing interface is triggered, the contract information input through the contract signing interface is obtained, and a data preservation contract is generated based on the contract template and the contract information and returned to the institution terminal to store the data preservation contract after receiving the contract signing information sent by the institution terminal.

[0074] To sum up, the one or more data preservation evaluation and processing methods provided in this embodiment, after receiving the evaluation request for data preservation evaluation sent by the institution terminal, generate question and answer interaction data for data preservation evaluation of the institution, and perform question and answer interaction processing with the institution terminal based on the question and answer interaction data, perform secret data preservation evaluation processing on the institution based on the question and answer confirmation data obtained from the question and answer interaction processing, obtain the evaluation results, generate an evaluation result display page for the configuration data preservation interface and send it to the institution terminal, so as to perform secret data preservation processing through the data preservation interface, thereby improving the convenience of users in performing secret data preservation and improving the user experience.

[0075] Furthermore, the organization's secret data preservation is evaluated from three dimensions: execution score, evaluation keywords, and data preservation strategy. Specifically, the evaluation results of these three dimensions are calculated by calculating the organization's execution score for secret data preservation, comparing the execution score with the score threshold and generating evaluation keywords based on the score comparison result, and generating data preservation strategy for the target interaction question based on the user's confirmed answer to the target interaction question, thereby improving the organization's perception of data preservation.

[0076] The following takes the application of a data preservation evaluation and processing method provided by this embodiment in a secret data preservation scenario as an example, and combines Figure 9 to further illustrate the data preservation evaluation and processing method provided by this embodiment. Referring to Figure 9, the data preservation evaluation and processing method applied to the secret data preservation scenario specifically includes the following steps.

[0077] Step S906: receiving an assessment request for data preservation assessment sent by the institution terminal.

[0078] Step S908: Generate question-answer interaction data for data preservation assessment of the institution, and perform question-answer interaction processing with the institution terminal based on the question-answer interaction data.

[0079] Step S912: Based on the question-answer confirmation data obtained through the question-answer interaction process, an evaluation process is performed on the confidential data preservation of the organization to obtain an evaluation result.

[0080] Step S914: Generate an evaluation result display page for the configuration data preservation interface and send it to the institution terminal.

[0081] Step S920: Obtain secret data input through the data security interface.

[0082] Step S922: Send the secret data to the storage node of the blockchain for storage, and generate data evidence of the secret data.

[0083] The above-mentioned steps S906 to S908, steps S912 to S914, and steps S920 to S922 provided in this embodiment are executed by the server. It should be noted that the processing procedures of the server executing the above-mentioned steps S906 to S908, steps S912 to S914, and steps S920 to S922 and the processing procedures of steps S902 to S904, step S910, and steps S916 to S918 executed by the institutional terminal in the following embodiment can cooperate with each other during the execution process. Therefore, when reading this embodiment, please refer to the corresponding contents of steps S902 to S904, step S910, and steps S916 to S918 provided in the following method embodiment.

[0084] One or more embodiments of another data preservation evaluation and processing method provided in this specification are as follows.

[0085] 10 , the data preservation evaluation and processing method provided in this embodiment specifically includes steps S1002 to S1008 .

[0086] Step S1002: Apply for institution certification based on the acquired institution certification information and obtain the certification result.

[0087] In this embodiment, data preservation refers to protecting data. Accordingly, the data preservation assessment is to assess whether the data protection behavior is appropriate, or to assess whether the data storage environment is safe. The data may be confidential data, and the data preservation assessment may also be a confidential data preservation assessment.

[0088] In order to improve the security of data preservation assessment of institutions, institutions are authenticated in advance to verify their legal identity. Specifically, institution authentication information can be collected by sending an institution authentication page to an institution terminal, and the institution is authenticated based on the institution authentication information. In an optional implementation provided by this embodiment, the institution is authenticated in the following manner: receiving an institution authentication application sent by the institution terminal, and sending an institution authentication page to the institution terminal; obtaining the institution authentication information collected based on the institution authentication page and returned by the institution terminal, and sending the authentication result to the institution terminal after authenticating the institution based on the institution authentication information.

[0089] Specifically, after receiving an institution authentication application from an institution terminal, the institution authentication page is sent to the institution terminal, the institution authentication information collected based on the institution authentication page is obtained from the institution terminal, and after performing institution authentication of the institution based on the institution authentication information, the authentication result is sent to the institution terminal. Optionally, the evaluation request is submitted after the institution corresponding to the institution terminal has been authenticated.

[0090] For example, after receiving the institutional authentication application sent by the institutional terminal, the institutional authentication page shown in Figure 3 is sent to the institutional terminal, and the institutional terminal returns the enterprise name, enterprise logo, corporate legal person name, and legal person identity logo collected based on the institutional authentication page, and generates an institutional authentication code as shown in Figure 4. The institution enters the authentication homepage as shown in Figure 5 by scanning the institutional authentication code. The user clicks the "Start Authentication" button on the page to jump to the authorization agreement signing page as shown in Figure 6 to authorize the acquisition of the user's user information. The server performs institutional authentication of the institution based on the user's user information and the institutional authentication information collected through the institutional authentication page, and sends the authentication result to the institutional terminal.

[0091] Step S1004: When the authentication result is authentication passed, an evaluation request for data security evaluation is obtained and sent to the server.

[0092] After applying for institutional certification based on the obtained institutional certification information and obtaining the certification result, in this step, if the certification result is passed, an assessment request for data security assessment is obtained and sent to the server.

[0093] Step S1006 , cooperating with the server to perform question-answer interaction processing based on the question-answer interaction data generated by the server for performing the data preservation assessment on the organization.

[0094] After the above-mentioned evaluation request for data preservation evaluation is obtained and sent to the server, in this step, the server cooperates with the server to perform question-and-answer interaction processing based on the question-and-answer interaction data for data preservation evaluation of the organization generated by the server.

[0095] The question-and-answer interaction data refers to the data generated in the process of obtaining answers by asking questions. The question-and-answer interaction data may include question data and candidate answer data. For example, when evaluating the confidential data preservation of an enterprise through a questionnaire survey, questions and candidate answers can be set for the enterprise's historical protection behavior of confidential data, and the questions and candidate answers of the questionnaire can be used as question-and-answer interaction data. In addition, the question-and-answer interaction data may also include question data, such as only sending questions to the enterprise to obtain answers entered by the user. Optionally, the question-and-answer interaction data includes questionnaire data. Since the question-and-answer interaction data may contain multiple question data, the process of sending each question data to the institution terminal and obtaining answer data can be called question-and-answer interaction.

[0096] During the specific implementation process, in order to conduct an organization's data preservation assessment and make the assessment results more accurate, this embodiment provides two methods for obtaining question-and-answer interaction data. (1) Generating question-and-answer interaction data by extracting a preset number of interactive questions and candidate answers to the interactive questions from a question-and-answer interaction library. In an optional implementation provided by this embodiment, the question-and-answer interaction data is generated in the following manner: extracting a preset number of interactive questions and candidate answers to the interactive questions from a question-and-answer interaction library based on the organization information of the organization; and generating the question-and-answer interaction data based on the candidate answers to the interactive questions and the interactive questions.

[0097] Specifically, the question-and-answer interaction data for data preservation assessment of an organization is generated based on a preset number of interactive questions and candidate answers extracted from a question-and-answer database. The extraction rules for extracting interactive questions and candidate answers from the question-and-answer database are determined based on the organizational information of the organization. The interactive questions and candidate answers in the question-and-answer interaction database can be set manually or generated by a question-and-answer interaction model obtained through training. This is not limited in this embodiment.

[0098] For example, when the organization type included in the organization information of an organization is Type A organization, x interactive questions suitable for Type A organizations are extracted from the question-and-answer interaction library, where each interactive question may have y candidate answers, and question-and-answer interaction data is generated based on the x interactive questions and x*y candidate answers.

[0099] (2) Question and answer interaction data is generated by extracting each interactive question and the candidate answer of each interactive question from the question and answer interaction library in sequence. The following takes the extraction of the first interactive question and the candidate answer of the first interactive question from the question and answer interaction library as an example to illustrate the generation of the first question and answer interaction data. In another optional implementation provided by this embodiment, the question and answer interaction data is generated in the following manner: the first interactive question and the candidate answer of the first interactive question are extracted from the question and answer interaction library according to the institutional information of the institution; and the first question and answer interaction data is generated based on the first interactive question and the candidate answer of the first interactive question.

[0100] Specifically, in addition to the above-mentioned one-time extraction of a preset number of interactive questions and candidate answers to the interactive questions from the question-and-answer interaction library, each interactive question and candidate answer to each interactive question can also be extracted from the question-and-answer interaction library in sequence, wherein the first interactive question extracted from the question-and-answer interaction library is used as the first interactive question, and the second interactive question extracted from the question-and-answer interaction library can be determined based on the first interactive question. After the first interactive question and the candidate answer to the first interactive question are extracted randomly or in other ways, the first question-and-answer interaction data is generated based on the first interactive question and the candidate answer to the first interactive question.

[0101] In the case where each interactive question and each candidate answer are extracted from the question-and-answer interaction library in sequence as described above, this embodiment provides an optional implementation method for cooperating with the server to perform question-and-answer interaction processing in the following manner: receiving a first interactive question and a candidate answer to the first interactive question sent by the server; sending a first confirmation answer determined based on the first interactive question and the candidate answer to the server; receiving a second interactive question and a candidate answer to the second interactive question sent by the server; and sending a second confirmation answer determined based on the second interactive question and the candidate answer to the second interactive question to the server.

[0102] The question and answer confirmation data refers to the data of the answer selected by the user. For example, a question has 4 candidate answers ABCD. When the user selects candidate answer C, the question and answer confirmation data is the data including candidate answer C.

[0103] The evaluation results include at least one of the following: an execution score, a data preservation strategy, evaluation keywords, and data preservation recommendations. The execution score refers to the score obtained by grading the organization's execution performance. For example, an organization's execution score could be x points on a 100-point scale. The data preservation strategy refers to the data preservation strategy. The evaluation keywords refer to the evaluation of the organization's current data preservation performance, such as "qualified," "unqualified," etc. The data preservation recommendations can be recommendations for the organization's data preservation, such as "recommendations for improving measures to protect trade secrets." Optionally, confidential data includes trade secrets. For example, confidential data can be non-public business information related to an enterprise's business activities that is acquired or created during the course of its operations. Secret data preservation refers to the protection of confidential data. The evaluation of an organization's confidential data preservation can assess the adequacy of the organization's confidential data protection measures. For example, the evaluation can assess whether the enterprise has properly managed its confidential personnel, whether it has properly preserved paper confidential data, and whether the equipment storing confidential data is secure.

[0104] During the specific execution process, in order to better obtain the evaluation results, by comparing the user-confirmed answer with the preset answer and calculating the execution score of the organization based on the answer comparison result, an optional implementation provided by this embodiment adopts the following method to evaluate the secret data preservation of the organization based on the question and answer confirmation data obtained from the question and answer interaction processing: determine the user-confirmed answer to the interactive question contained in the question and answer confirmation data, and compare the user-confirmed answer with the preset answer to the interactive question; calculate the execution score of the organization for the secret data preservation based on the answer comparison result.

[0105] The user-confirmed answer refers to the answer selected by the user from the candidate answers. For example, if the user selects candidate answer C from 4 candidate answers ABCD, the user-confirmed answer is C.

[0106] Specifically, after the question-and-answer interaction processing with the institution terminal, the user-confirmed answer of each interactive question contained in the question-and-answer confirmation data is determined, and each user-confirmed answer is compared with the preset answer of the corresponding interactive question. The execution score of the institution for secret data preservation is calculated based on each answer comparison result, wherein the answer comparison result of comparing the user-confirmed answer with the preset answer of the interactive question can be a consistent answer or an inconsistent answer. If the answer is consistent, the execution score of the institution for secret data preservation is calculated based on the preset score corresponding to the preset answer of the interactive question. If the answer is inconsistent, the execution score of the institution is calculated based on the difference between the preset score of the user-confirmed answer and the preset score of the preset answer.

[0107] For example, taking interactive question 1 as an example, the scores of the four candidate answers ABCD of interactive question 1 are abcd respectively, where A is the preset answer, the score corresponding to the preset answer A is a, C is the user-confirmed answer, and the score corresponding to the user-confirmed answer C is c. If the user-confirmed answer is inconsistent with the preset answer, the difference between a and c is calculated, and the execution score of the secret data preservation is calculated based on the difference between a and c.

[0108] Furthermore, after comparing the user's confirmed answer with the preset answer to the interactive question to obtain the answer comparison result, a data preservation strategy can also be generated for the interactive question for which the user has not selected the preset answer. In an optional implementation provided by this embodiment, the following method is used to evaluate the confidential data preservation of the organization based on the question and answer confirmation data obtained from the question and answer interaction processing: determine the target interactive question among the interactive questions based on the answer comparison result; and generate a data preservation strategy for the target interactive question based on the user's confirmed answer to the target interactive question.

[0109] Specifically, after comparing the user's confirmed answer with the preset answer to the interactive question to obtain the answer comparison results, if there are interactive questions with inconsistent answers, these interactive questions are identified as target interactive questions, and corresponding data preservation policies are generated based on the user's confirmed answers to the target interactive questions. The data preservation policies can be obtained by inputting the user's confirmed answers into a pre-trained policy model, or by pre-setting a data preservation policy library. After obtaining the user's confirmed answers, the data preservation policies corresponding to the user's confirmed answers are extracted from the data preservation policy library.

[0110] For example, if the user's confirmed answer to the first question among the x questions selected by the user is inconsistent with the preset answer, the user's confirmed answer based on the first question is input into a pre-trained policy model to obtain a data preservation policy for the user's confirmed answer; or, a data preservation policy corresponding to the user's confirmed answer is extracted from the data preservation policy library.

[0111] In addition, after calculating the execution score of the agency for secret data preservation based on the answer comparison result, evaluation keywords and data preservation suggestions can also be generated based on the execution score and the score threshold. In an optional implementation provided by this embodiment, the agency is evaluated for secret data preservation based on the question and answer confirmation data obtained through question and answer interaction processing in the following manner: the execution score is compared with the score threshold, and evaluation keywords are generated based on the score comparison result; based on the score comparison result, data preservation suggestions that match the score comparison result are generated.

[0112] Specifically, after the execution score of the secret data preservation is calculated by the calculation agency based on the answer comparison result, the execution score is compared with the score threshold. If the execution score is greater than or equal to the score threshold, a first evaluation keyword is generated. If the execution score is less than the score threshold, a second evaluation keyword and corresponding data preservation suggestions are generated.

[0113] For example, if the execution score of an enterprise is less than the scoring threshold, the evaluation keyword "unqualified" and the data preservation suggestion of "recommendation to improve the protection measures for trade secrets" will be generated; if the execution score of the enterprise is greater than or equal to the scoring threshold, the evaluation keyword "qualified" will be generated.

[0114] It should be noted that the above-mentioned process of calculating the execution score, generating the data preservation strategy for the target interaction problem, generating the evaluation keywords, and generating the data preservation suggestions that match the score comparison results can be executed separately. The specific execution process is shown above, and this embodiment will not be repeated here.

[0115] During the specific execution process, when each interactive question and the candidate answer to each interactive question are extracted from the question-and-answer interaction library in sequence, after the question-and-answer interaction processing is performed with the institution terminal to obtain the question-and-answer confirmation data of each interactive question, an optional implementation method provided by this embodiment adopts the following method to evaluate the secret data preservation of the institution based on the question-and-answer confirmation data obtained by the question-and-answer interaction processing: according to the user confirmed answers to each interactive question contained in the question-and-answer confirmation data and the question priority of each interactive question, the execution score of the institution for the secret data preservation is calculated; the execution score is compared with the score threshold, and a data preservation strategy for the secret data preservation of the institution is generated according to the score comparison result.

[0116] Specifically, based on the user-confirmed answers to each interactive question contained in the question and answer confirmation data and the question priority of each interactive question, the execution score of the organization for confidential data preservation is calculated, and the execution score is compared with the score threshold. Based on the score comparison result, a data preservation strategy for confidential data preservation of the organization is generated.

[0117] In the process of calculating the execution score, the weight of each interactive question can be determined according to the question priority of the interactive question, and then the weighted score is obtained as the execution score according to the product of the score of the interactive question and the weight.

[0118] Step S1008: Receive and display the evaluation result display page of the configuration data preservation interface sent by the server.

[0119] After cooperating with the server to perform the Q&A interaction based on the server-generated data for the data security assessment of the organization, this step receives and displays the assessment result display page for configuring the data security interface from the server. Optionally, the assessment result displayed on the assessment result display page is obtained after the server performs the confidential data security assessment of the organization based on the Q&A confirmation data.

[0120] During the specific execution process, after receiving and displaying the evaluation result display page of the configuration data preservation interface sent by the server, the secret data entered by the user through the data preservation interface can be obtained according to the trigger instruction of the data preservation interface configured by the user on the evaluation result display page; and the secret data can be sent to the server.

[0121] Optionally, when a consultation interface is also configured in the evaluation result display page, the data preservation question input by the user through the consultation interface is obtained according to the user's trigger instruction for the consultation interface configured on the evaluation result display page; the data preservation question is sent to the server, and a data preservation reply to the data preservation question sent by the server is received.

[0122] In addition, when a contract signing interface is also configured in the evaluation result display page, the contract information entered by the user through the contract signing interface is obtained according to the user's trigger instruction for the contract signing interface configured on the evaluation result display page; the contract information is sent to the server, and the data preservation contract returned by the server is received; the contract signing information of the user for the data preservation contract is obtained and sent to the server.

[0123] The following takes the application of a data preservation evaluation and processing method provided by this embodiment in a secret data preservation scenario as an example, and combines Figure 9 to further illustrate the data preservation evaluation and processing method provided by this embodiment. Referring to Figure 9, the data preservation evaluation and processing method applied to the secret data preservation scenario specifically includes the following steps.

[0124] Step S902: Apply for institution certification based on the acquired institution certification information and obtain the certification result.

[0125] Step S904: If the authentication result is authentication passed, an evaluation request for data security evaluation is obtained and sent to the server.

[0126] Step S910 , cooperating with the server to perform question-answer interaction processing based on the question-answer interaction data generated by the server for conducting data preservation assessment on the organization.

[0127] Step S916: Receive and display the evaluation result display page of the configuration data preservation interface sent by the server.

[0128] Step S918: Receive the user's trigger instruction for the data preservation interface configured on the evaluation result display page, obtain the secret data entered by the user, and send it to the server.

[0129] An embodiment of a data preservation evaluation and processing device provided in this specification is as follows.

[0130] In the above-mentioned embodiment, a data preservation evaluation and processing method is provided. Correspondingly, a data preservation evaluation and processing device is also provided, which will be described below with reference to the accompanying drawings.

[0131] 11 , which shows a schematic diagram of a data preservation evaluation and processing device provided by this embodiment.

[0132] Since the device embodiment corresponds to the method embodiment, the description is relatively simple. For the relevant parts, please refer to the corresponding description of the method embodiment provided above. The device embodiment described below is only illustrative.

[0133] This embodiment provides a data preservation evaluation and processing device, which runs on a server, and the device includes: a request receiving module 1102, which is configured to receive an evaluation request for data preservation evaluation sent by an institution terminal, and the evaluation request is submitted after the institution corresponding to the institution terminal is authenticated; an interactive question and answer processing module 1104, which is configured to generate question and answer interaction data for performing the data preservation evaluation on the institution, and perform question and answer interaction processing with the institution terminal based on the question and answer interaction data; an evaluation module 1106, which is configured to perform secret data preservation evaluation processing on the institution based on the question and answer confirmation data obtained from the question and answer interaction processing, and obtain an evaluation result; a data preservation processing module 1108, which is configured to generate an evaluation result display page for configuring a data preservation interface and send it to the institution terminal, so as to perform secret data preservation processing through the data preservation interface.

[0134] Another embodiment of a data preservation evaluation and processing device provided in this specification is as follows.

[0135] In the above-mentioned embodiment, another data preservation evaluation and processing method is provided. Correspondingly, another data preservation evaluation and processing device is also provided, which will be described below with reference to the accompanying drawings.

[0136] 12 , which shows a schematic diagram of another data preservation evaluation and processing device provided by this embodiment.

[0137] Since the device embodiment corresponds to the method embodiment, the description is relatively simple. For the relevant parts, please refer to the corresponding description of the method embodiment provided above. The device embodiment described below is only illustrative.

[0138] This embodiment provides a data preservation evaluation and processing device, which runs on an institution terminal, and the device includes: an authentication module 1202, which is configured to apply for institution authentication based on the obtained institution authentication information and obtain the authentication result; when the authentication result is authentication passed, running the evaluation request acquisition module 1204, the evaluation request acquisition module 1204, which is configured to obtain an evaluation request for data preservation evaluation and send it to the server; a question-and-answer interaction cooperation module 1206, which is configured to cooperate with the server to perform question-and-answer interaction processing based on the question-and-answer interaction data generated by the server for performing the data preservation evaluation on the institution; an evaluation result display module 1208, which is configured to receive and display the evaluation result display page of the configuration data preservation interface sent by the server, the evaluation result displayed on the evaluation result display page is obtained after the server performs the secret data preservation evaluation processing on the institution based on the question-and-answer confirmation data.

[0139] A server embodiment provided in this specification is as follows.

[0140] Corresponding to the data preservation evaluation and processing method described above, based on the same technical concept, one or more embodiments of this specification also provide a server, which is used to execute the data preservation evaluation and processing method provided above. Figure 13 is a structural schematic diagram of a server provided by one or more embodiments of this specification.

[0141] This embodiment provides a server, including the following.

[0142] As shown in FIG13 , the server may vary significantly due to different configurations or performances, and may include one or more processors 1301 and memory 1302. The memory 1302 may store one or more applications or data. Memory 1302 may be either short-term storage or persistent storage. The application stored in memory 1302 may include one or more modules (not shown), each of which may include a series of computer-executable instructions in the server. Furthermore, processor 1301 may be configured to communicate with memory 1302 to execute a series of computer-executable instructions in memory 1302 on the server. The server may also include one or more power supplies 1303, one or more wired or wireless network interfaces 1304, one or more input / output interfaces 1305, one or more keyboards 1306, and the like.

[0143] In a specific embodiment, the server includes a memory and one or more programs, wherein the one or more programs are stored in the memory, and the one or more programs may include one or more modules, and each module may include a series of computer-executable instructions in the server, and the one or more programs are configured to be executed by one or more processors, including the following computer-executable instructions: receiving an assessment request for data security assessment sent by an institution terminal, and the assessment request is submitted after institution authentication of the institution corresponding to the institution terminal; generating question-and-answer interaction data for performing the data security assessment on the institution, and performing question-and-answer interaction processing with the institution terminal based on the question-and-answer interaction data; performing secret data security assessment processing on the institution based on the question-and-answer confirmation data obtained from the question-and-answer interaction processing to obtain an assessment result; generating an assessment result display page for configuring the data security interface and sending it to the institution terminal to perform secret data security processing through the data security interface.

[0144] An embodiment of a mechanism terminal provided in this specification is as follows.

[0145] Corresponding to the other data preservation evaluation and processing method described above, based on the same technical concept, one or more embodiments of this specification also provide an institutional terminal, which is used to execute the other data preservation evaluation and processing method provided above. Figure 14 is a structural schematic diagram of an institutional terminal provided by one or more embodiments of this specification.

[0146] This embodiment provides an institutional terminal, including the following.

[0147] As shown in Figure 14, the institutional terminal may have relatively large differences due to different configurations or performances, and may include one or more processors 1401 and memory 1402, and the memory 1402 may store one or more storage applications or data. Among them, the memory 1402 can be a temporary storage or a permanent storage. The application stored in the memory 1402 may include one or more modules (not shown in the figure), and each module may include a series of computer-executable instructions in the institutional terminal. Furthermore, the processor 1401 can be configured to communicate with the memory 1402, and the institutional terminal executes a series of computer-executable instructions in the memory 1402. The institutional terminal may also include one or more power supplies 1403, one or more wired or wireless network interfaces 1404, one or more input / output interfaces 1405, one or more keyboards 1406, etc.

[0148] In a specific embodiment, the institution terminal includes a memory and one or more programs, wherein the one or more programs are stored in the memory, and the one or more programs may include one or more modules, and each module may include a series of computer-executable instructions in the institution terminal, and is configured to be executed by one or more processors. The one or more programs include the following computer-executable instructions: applying for institution certification based on the obtained institution certification information, and obtaining the certification result; when the certification result is that the certification is passed, obtaining an assessment request for data security assessment and sending it to the server; cooperating with the server to perform question-and-answer interaction processing based on the question-and-answer interaction data generated by the server for performing the data security assessment on the institution; receiving and displaying the assessment result display page of the configuration data security interface sent by the server, and the assessment result displayed on the assessment result display page is obtained after the server performs the assessment processing on the secret data security of the institution based on the question-and-answer confirmation data.

[0149] An embodiment of a storage medium provided in this specification is as follows.

[0150] Corresponding to the data preservation evaluation and processing method described above, based on the same technical concept, one or more embodiments of this specification further provide a storage medium.

[0151] The storage medium provided in this embodiment is used to store computer-executable instructions, which implement the following process when executed by a processor: receiving an assessment request for data preservation assessment sent by an institution terminal, and the assessment request is submitted after institutional authentication of the institution corresponding to the institution terminal; generating question and answer interaction data for performing the data preservation assessment on the institution, and performing question and answer interaction processing with the institution terminal based on the question and answer interaction data; performing secret data preservation assessment processing on the institution based on the question and answer confirmation data obtained from the question and answer interaction processing, and obtaining an assessment result; generating an assessment result display page for configuring the data preservation interface and sending it to the institution terminal, so as to perform secret data preservation processing through the data preservation interface.

[0152] It should be noted that the embodiment of a storage medium in this specification and the embodiment of a data preservation evaluation and processing method in this specification are based on the same inventive concept. Therefore, the specific implementation of this embodiment can refer to the implementation of the aforementioned corresponding method, and the repeated parts will not be repeated.

[0153] Another storage medium embodiment provided in this specification is as follows.

[0154] Corresponding to the other data preservation evaluation and processing method described above, based on the same technical concept, one or more embodiments of this specification also provide another storage medium.

[0155] The storage medium provided in this embodiment is used to store computer-executable instructions, which implement the following process when executed by a processor: applying for institutional authentication based on the obtained institutional authentication information and obtaining an authentication result; when the authentication result is that the authentication is passed, obtaining an assessment request for data preservation assessment and sending it to a server; cooperating with the server to perform question-and-answer interaction processing based on the question-and-answer interaction data generated by the server for performing the data preservation assessment on the institution; receiving and displaying an assessment result display page for the configuration data preservation interface sent by the server, wherein the assessment result displayed on the assessment result display page is obtained after the server performs a confidential data preservation assessment on the institution based on the question-and-answer confirmation data.

[0156] It should be noted that the embodiment of another storage medium in this specification and the embodiment of another data preservation evaluation and processing method in this specification are based on the same inventive concept. Therefore, the specific implementation of this embodiment can refer to the implementation of the aforementioned corresponding method, and the repeated parts will not be repeated.

[0157] The various embodiments in this specification are described in a progressive manner, and the same or similar parts between the various embodiments can be referred to each other. Each embodiment focuses on the differences from other embodiments. For example, the device embodiment, equipment embodiment and storage medium embodiment are similar to the method embodiment, so the description is relatively simple. To read the relevant content in the device embodiment, equipment embodiment and storage medium embodiment, please refer to the partial description of the method embodiment.

[0158] The foregoing description of this specification describes specific embodiments. Other embodiments are within the scope of the appended claims. In some cases, the actions or steps recited in the claims can be performed in an order different from that described in the embodiments and still achieve the desired results. Furthermore, the processes depicted in the accompanying drawings do not necessarily require the specific order shown or the sequential order to achieve the desired results. In certain embodiments, multitasking and parallel processing are also possible or may be advantageous.

[0159] In the 1930s, technological improvements could be clearly distinguished as either hardware improvements (for example, improvements to circuit structures such as diodes, transistors, and switches) or software improvements (improvements to process flows). However, with the advancement of technology, many process flow improvements today can now be considered direct improvements to hardware circuit structures. Designers almost always program the improved process flow into the hardware circuit to obtain the corresponding hardware circuit structure. Therefore, it cannot be said that a process flow improvement cannot be implemented using hardware modules. For example, a programmable logic device (PLD) (such as a field programmable gate array (FPGA)) is an integrated circuit whose logical function is determined by user programming of the device. Designers can "integrate" a digital system on a PLD through their own programming, without having to hire a chip manufacturer to design and produce a dedicated integrated circuit chip. Moreover, nowadays, instead of manually fabricating integrated circuit chips, this programming is mostly performed using "logic compiler" software. This is similar to the software compiler used when developing programs. Before compilation, the original code must also be written in a specific programming language, called a hardware description language (HDL). There is not just one HDL, but many, such as ABEL (Advanced Boolean Expression Language), AHDL (Altera Hardware Description Language), Confluence, CUPL (Cornell University Programming Language), HDCal, JHDL (Java Hardware Description Language), Lava, Lola, MyHDL, PALASM, RHDL (Ruby Hardware Description Language), etc. The most commonly used are VHDL (Very-High-Speed ​​Integrated Circuit Hardware Description Language) and Verilog. Those skilled in the art will also understand that by simply programming the method flow in one of these hardware description languages ​​and then programming it into an integrated circuit, a hardware circuit that implements the logic method flow can be easily obtained.

[0160] The controller can be implemented in any suitable manner. For example, the controller can take the form of a microprocessor or processor and a computer-readable medium storing computer-readable program code (e.g., software or firmware) executable by the (micro)processor, logic gates, switches, an application-specific integrated circuit (ASIC), a programmable logic controller, and an embedded microcontroller. Examples of controllers include, but are not limited to, the following microcontrollers: ARC 625D, Atmel AT91SAM, Microchip PIC18F26K20, and Silicone Labs C8051F320. The memory controller can also be implemented as part of the control logic of the memory. Users skilled in the art will also know that in addition to implementing the controller in the form of pure computer-readable program code, it is entirely possible to implement the same functions in the form of logic gates, switches, an application-specific integrated circuit, a programmable logic controller, and an embedded microcontroller by logically programming the method steps. Therefore, such a controller can be considered a hardware component, and the means for implementing various functions included therein can also be considered as structures within the hardware component. Or even, the means for implementing various functions can be considered as both a software module implementing the method and a structure within the hardware component.

[0161] The systems, devices, modules, or units described in the above embodiments may be implemented by computer chips or physical devices, or by commercial products with certain functions. A typical implementation device is a computer. Specifically, the computer may be, for example, a personal computer, a laptop computer, a cellular phone, a camera phone, a smartphone, a personal digital assistant, a media player, a navigation device, an email device, a game console, a tablet computer, a wearable device, or a combination of any of these devices.

[0162] For the convenience of description, the above devices are described as being divided into various units according to their functions. Of course, when implementing the embodiments of this specification, the functions of each unit can be implemented in the same or multiple software and / or hardware.

[0163] It will be understood by those skilled in the art that one or more embodiments of this specification may be provided as a method, system, or computer program product. Thus, one or more embodiments of this specification may take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, this specification may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to magnetic disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0164] This specification is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of this specification. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device produce a device for implementing the functions specified in one or more processes in the flowchart and / or one or more boxes in the block diagram.

[0165] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, such that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device that implements the functions specified in one or more processes of the flowchart and / or one or more blocks of the block diagram. These computer program instructions may also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, whereby the instructions executed on the computer or other programmable device provide steps for implementing the functions specified in one or more processes of the flowchart and / or one or more blocks of the block diagram.

[0166] In a typical configuration, a computing device includes one or more processors (CPUs), input / output interfaces, network interfaces, and memory. Memory may include non-permanent storage in computer-readable media, random access memory (RAM), and / or non-volatile memory, such as read-only memory (ROM) or flash RAM. Memory is an example of a computer-readable medium. Computer-readable media, including both permanent and non-permanent, removable and non-removable media, can be implemented using any method or technology for information storage. Information can be computer-readable instructions, data structures, program modules, or other data. Examples of computer storage media include, but are not limited to, phase-change RAM (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technologies, compact disc read-only memory (CD-ROM), digital versatile disc (DVD) or other optical storage, magnetic cassettes, magnetic disk storage or other magnetic storage devices, or any other non-transmission medium that can be used to store information accessible by a computing device. According to the definition in this article, computer-readable media does not include transitory media such as modulated data signals and carrier waves.

[0167] It should also be noted that the terms "comprises," "includes," or any other variations thereof are intended to encompass non-exclusive inclusion, such that a process, method, commodity, or apparatus that includes a series of elements includes not only those elements but also other elements not explicitly listed, or includes elements inherent to such process, method, commodity, or apparatus. In the absence of further limitations, an element defined by the phrase "comprises a ..." does not exclude the presence of other identical elements in the process, method, commodity, or apparatus that includes the element.

[0168] One or more embodiments of this specification may be described in the general context of computer-executable instructions executed by a computer, such as program modules. Generally, program modules include routines, programs, objects, components, data structures, and the like that perform specific tasks or implement specific abstract data types. One or more embodiments of this specification may also be practiced in distributed computing environments where tasks are performed by remote processing devices connected via a communications network. In a distributed computing environment, program modules may be located in local and remote computer storage media, including storage devices.

[0169] The foregoing description is merely an example of the present invention and is not intended to limit the present invention. This document is susceptible to various modifications and variations by those skilled in the art. Any modifications, equivalent substitutions, or improvements made within the spirit and principles of this document are intended to be encompassed by the claims herein.

Claims

1. A method for evaluating and processing data preservation, which is applied to a server. The method includes: Receiving an evaluation request for data preservation sent by an institutional terminal, where the evaluation request is submitted after the institution corresponding to the institutional terminal is authenticated; Generating question-and-answer interaction data for evaluating the data preservation of the institution, and performing question-and-answer interaction processing with the institutional terminal based on the question-and-answer interaction data; Based on the question-and-answer confirmation data obtained from the question-and-answer interaction processing, performing an evaluation process for the confidential data preservation of the institution to obtain an evaluation result; Generating an evaluation result display page for configuring the data preservation interface and sending it to the institutional terminal to perform confidential data preservation processing through the data preservation interface.

2. The method for evaluating and processing data preservation according to claim 1, wherein the question-and-answer interaction data is generated in the following manner: Extracting a preset number of interaction questions and candidate answers for the interaction questions from a question-and-answer interaction library according to the institutional information of the institution; Generating the question-and-answer interaction data based on the candidate answers and the interaction questions of the interaction questions.

3. The method for evaluating and processing data preservation according to claim 2, wherein performing an evaluation process for the confidential data preservation of the institution based on the question-and-answer confirmation data obtained from the question-and-answer interaction processing includes: Determining the user confirmation answers of the interaction questions included in the question-and-answer confirmation data, and comparing the user confirmation answers with the preset answers of the interaction questions; Calculating an execution score for the confidential data preservation of the institution according to the answer comparison result.

4. The method for evaluating and processing data preservation according to claim 3, wherein performing an evaluation process for the confidential data preservation of the institution based on the question-and-answer confirmation data obtained from the question-and-answer interaction processing further includes: Determining target interaction questions in the interaction questions according to the answer comparison result; Generating a data preservation strategy for the target interaction questions based on the user confirmation answers of the target interaction questions.

5. The method for evaluating and processing data preservation according to claim 3, wherein performing an evaluation process for the confidential data preservation of the institution based on the question-and-answer confirmation data obtained from the question-and-answer interaction processing further includes: Comparing the execution score with a score threshold, and generating an evaluation keyword according to the score comparison result; Generating a data preservation suggestion that matches the score comparison result based on the score comparison result.

6. The method for evaluating and processing data preservation according to claim 1, wherein the question-and-answer interaction data is generated in the following manner: Extracting a first interaction question and candidate answers for the first interaction question from a question-and-answer interaction library according to the institutional information of the institution; Generating first question-and-answer interaction data based on the first interaction question and the candidate answers for the first interaction question.

7. The method for evaluating and processing data preservation according to claim 6, wherein performing question-and-answer interaction processing with the institutional terminal based on the question-and-answer interaction data includes: Sending the first interaction questions and the candidate answers for the first interaction questions included in the first question-and-answer interaction data to the institutional terminal; Obtain the first confirmation answer returned by the institutional terminal based on the first interaction question, and according to the first confirmation answer and a preset question extraction rule, extract a second interaction question and candidate answers for the second interaction question from the Q&A interaction library as second Q&A interaction data; Send the second Q&A interaction data to the institutional terminal.

8. The evaluation and processing method for data preservation according to claim 7, wherein the evaluation and processing of the institutional secret data preservation based on the Q&A confirmation data obtained through Q&A interaction processing includes: Calculate an execution score for the institution to perform the secret data preservation according to the user confirmation answers of each interaction question included in the Q&A confirmation data and the question priorities of each interaction question; Compare the execution score with a score threshold, and generate a data preservation strategy for the institution to perform secret data preservation according to the score comparison result.

9. The evaluation and processing method for data preservation according to claim 1, wherein the secret data preservation processing through the data preservation interface includes: Obtain secret data input through the data preservation interface; Send the secret data to a storage node of the blockchain for storage, and generate a data deposit certificate for the secret data.

10. The evaluation result display page of the evaluation and processing method for data preservation according to claim 1 is further configured with a consultation interface; If the consultation interface is triggered, obtain a data preservation question input through the consultation interface, input the data preservation question into a data preservation interaction model for Q&A interaction processing, obtain a data preservation reply and send it to the institutional terminal; wherein, The data preservation interaction model is obtained by performing Q&A interaction training on a pre-trained Q&A interaction model using training data for data preservation; Or, If the consultation interface is triggered, generate a consultation task based on the data preservation question and assign it to a consultation service personnel, and send the data preservation reply of the consultation service personnel obtained by the institutional terminal for the data preservation question.

11. The evaluation result display page of the evaluation and processing method for data preservation according to claim 1 is further configured with a contract signing interface; If the contract signing interface is triggered, obtain contract information input through the contract signing interface, and generate a data preservation contract based on a contract template and the contract information and return it to the institutional terminal for storing the data preservation contract after receiving the contract signing information sent by the institutional terminal.

12. The authentication of the institution corresponding to the institutional terminal in the evaluation and processing method for data preservation according to claim 1 includes: Receive an institution authentication application sent by the institutional terminal, and send an institution authentication page to the institutional terminal; Obtain institution authentication information collected based on the institution authentication page returned by the institutional terminal, and send an authentication result to the institutional terminal after performing the institution authentication according to the institution authentication information.

13. An evaluation and processing method for data preservation, which is applied to an institutional terminal, and the method includes: Apply for institutional authentication based on the obtained institutional authentication information and obtain the authentication result; When the authentication result is authentication passed, obtain the evaluation request for data preservation evaluation and send it to the server; According to the question-and-answer interaction data for the institutional data preservation evaluation generated by the server, cooperate with the server to perform question-and-answer interaction processing; Receive and display the evaluation result display page for configuring the data preservation interface sent by the server, and the evaluation result displayed on the evaluation result display page is obtained after the server performs the evaluation process for the institutional secret data preservation based on the question-and-answer confirmation data.

14. The evaluation processing method for data preservation according to claim 13 further includes: According to the trigger instruction of the data preservation interface configured by the user on the evaluation result display page, obtain the secret data input by the user through the data preservation interface; Send the secret data to the server.

15. The evaluation processing method for data preservation according to claim 13, wherein the cooperating with the server to perform question-and-answer interaction processing includes: Receive the first interaction question sent by the server and the candidate answers for the first interaction question; Send the first confirmation answer determined based on the first interaction question and the candidate answers to the server; Receive the second interaction question sent by the server and the candidate answers for the second interaction question; Send the second confirmation answer determined based on the second interaction question and the candidate answers for the second interaction question to the server.

16. The evaluation processing method for data preservation according to claim 13 further includes; According to the trigger instruction of the consultation interface configured by the user on the evaluation result display page, obtain the data preservation question input by the user through the consultation interface; Send the data preservation question to the server and receive the data preservation reply to the data preservation question sent by the server.

17. The evaluation processing method for data preservation according to claim 13 further includes: According to the trigger instruction of the contract signing interface configured by the user on the evaluation result display page, obtain the contract information input by the user through the contract signing interface; Send the contract information to the server and receive the data preservation contract returned by the server; Obtain the contract signing information of the user for the data preservation contract and send it to the server.

18. An evaluation processing device for data preservation, running on a server, the device includes: A request receiving module, configured to receive the evaluation request for data preservation evaluation sent by the institutional terminal, and the evaluation request is submitted after the institutional authentication of the institution corresponding to the institutional terminal; An interactive question-and-answer processing module, configured to generate question-and-answer interaction data for the institutional data preservation evaluation and perform question-and-answer interaction processing with the institutional terminal based on the question-and-answer interaction data; An evaluation module, configured to perform an evaluation process for the institutional secret data preservation based on the question-and-answer confirmation data obtained from the question-and-answer interaction processing to obtain an evaluation result; A data preservation processing module, configured to generate an evaluation result display page for configuring a data preservation interface and send it to the institutional terminal, so as to perform secret data preservation processing through the data preservation interface.

19. An evaluation processing device for data preservation, running on an institutional terminal, the device includes: An authentication module, configured to perform an institutional authentication application according to the obtained institutional authentication information and obtain an authentication result; When the authentication result is authentication passed, run an evaluation request acquisition module, the evaluation request acquisition module is configured to obtain an evaluation request for data preservation evaluation and send it to the server; A question-and-answer interaction cooperation module, configured to cooperate with the server to perform question-and-answer interaction processing according to the question-and-answer interaction data generated by the server for the institutional data preservation evaluation; An evaluation result display module, configured to receive and display the evaluation result display page for configuring the data preservation interface sent by the server, and the evaluation result displayed on the evaluation result display page is obtained after the server performs an evaluation process for secret data preservation of the institution based on the question-and-answer confirmation data.

20. A server, including: A processor; And a memory configured to store computer-executable instructions, the computer-executable instructions, when executed, cause the processor to: Receive an evaluation request for data preservation evaluation sent by an institutional terminal, and the evaluation request is submitted after the institution corresponding to the institutional terminal is institutionally authenticated; Generate question-and-answer interaction data for the institutional data preservation evaluation, and perform question-and-answer interaction processing with the institutional terminal based on the question-and-answer interaction data; Based on the question-and-answer confirmation data obtained from the question-and-answer interaction processing, perform an evaluation process for secret data preservation of the institution to obtain an evaluation result; Generate an evaluation result display page for configuring a data preservation interface and send it to the institutional terminal, so as to perform secret data preservation processing through the data preservation interface.

21. An institutional terminal, including: A processor; And a memory configured to store computer-executable instructions, the computer-executable instructions, when executed, cause the processor to: Perform an institutional authentication application according to the obtained institutional authentication information and obtain an authentication result; When the authentication result is authentication passed, obtain an evaluation request for data preservation evaluation and send it to the server; According to the question-and-answer interaction data generated by the server for the institutional data preservation evaluation, cooperate with the server to perform question-and-answer interaction processing; Receive and display the evaluation result display page for configuring the data preservation interface sent by the server, and the evaluation result displayed on the evaluation result display page is obtained after the server performs an evaluation process for secret data preservation of the institution based on the question-and-answer confirmation data.

22. A storage medium for storing computer-executable instructions, the computer-executable instructions, when executed by a processor, implement the following process: Receive an evaluation request for data preservation evaluation sent by an institutional terminal, and the evaluation request is submitted after the institution corresponding to the institutional terminal is institutionally authenticated; Generate the Q&A interaction data for the data preservation evaluation of the institution, and perform Q&A interaction processing with the institution terminal based on the Q&A interaction data; Based on the Q&A confirmation data obtained from the Q&A interaction processing, evaluate the secret data preservation of the institution to obtain an evaluation result; Generate an evaluation result display page for configuring the data preservation interface and send it to the institution terminal for secret data preservation processing through the data preservation interface.

23. A storage medium for storing computer-executable instructions, which implement the following processes when executed by a processor: Submit an institution authentication application based on the obtained institution authentication information and obtain an authentication result; If the authentication result is authentication passed, obtain an evaluation request for data preservation evaluation and send it to the server; According to the Q&A interaction data generated by the server for the data preservation evaluation of the institution, cooperate with the server to perform Q&A interaction processing; Receive and display the evaluation result display page for configuring the data preservation interface sent by the server, and the evaluation result displayed on the evaluation result display page is obtained after the server evaluates the secret data preservation of the institution based on the Q&A confirmation data.

Images