Data protection method and system, computer device, and storage medium

Abstract

A data protection method and system, a computer device, and a storage medium. The method comprises: a terminal acquiring terminal data, and uploading the terminal data to a third-party resource pool configured with a preset IP address; an enterprise end sending a data processing platform to the third-party resource pool by means of a data exchange gateway; using a desktop screen transmitted by a console to access the data processing platform, reading the terminal data by means of the data processing platform, and processing the terminal data to obtain a target processing result corresponding to the terminal data; and the third-party resource pool using a data scanning system to filter the target processing result, and pushing the filtered target processing result to the terminal. The present application is used for protecting data security of terminal users.

Description

Data protection methods, systems, computer equipment and storage media

[0001] Cross-references to related applications

[0002] This application claims priority to Chinese Patent Application No. 202411629976.5, filed on November 14, 2024, entitled “Data Protection Method, System, Computer Equipment and Storage Medium”, the entire contents of which are incorporated herein by reference. Technical Field

[0003] This application relates to the field of information security technology, specifically to data protection methods, systems, computer equipment, and storage media. Background Technology

[0004] With the development and popularization of smart terminals such as the Internet of Things and smart cars, the demand for user data collection, storage, analysis, and processing from these smart terminals is becoming increasingly strong, even forming a data-driven smart business model: data collection -> data storage -> data analysis and processing -> terminal deployment -> data re-collection. In this model, user-facing smart terminals collect data and upload it to a storage resource pool designated by the enterprise, which is responsible for data storage and management. The enterprise's data analysis and processing system analyzes and processes the data in the storage resource pool, and if necessary, distributes the processing results to the terminals for deployment and operation. In this scenario, enterprises have a strong need for data collection and processing, and their business operations rely heavily on data processing. Because the data is entirely stored and managed by the enterprise, user data faces the risk of being illegally processed or transmitted abroad by the enterprise, which is difficult for regulatory agencies to detect, and there is also the risk of data loss in the event of enterprise bankruptcy.

[0005] Most related technologies focus on protecting data during data collection, transmission, and access through encryption, authentication, and access control to prevent data leakage. However, they lack effective measures against data misuse, improper handling, unauthorized transmission, and leakage of users' sensitive personal information by the companies collecting the data. Summary of the Invention

[0006] In view of this, this application provides a data protection method, system, computer equipment, and storage medium to address the lack of effective means to prevent the abuse, unauthorized processing, unauthorized transmission, and leakage of users' sensitive personal information by the enterprises that collect the data.

[0007] Firstly, this application provides a data protection method applied to a third-party resource pool, the method comprising:

[0008] Acquire terminal data collected and uploaded by the terminal, and store the terminal data in a preset IP address;

[0009] In response to data upload requests from enterprises, the system obtains the data processing platform uploaded by enterprises through the data exchange gateway.

[0010] In response to data processing requests from the enterprise, the desktop screen is transmitted to the enterprise via the console, enabling the enterprise to access the data processing platform through the desktop screen, read terminal data through the data processing platform, process the terminal data, and obtain the target processing result corresponding to the terminal data.

[0011] The data scanning system is used to filter the target processing results, and the filtered target processing results are pushed to the terminal.

[0012] In this application, a third-party resource pool is used to separate the enterprise-side and client-side terminals. Data from the terminals is only allowed to be processed in the third-party resource pool. This ensures that the enterprise can collect and process data normally within the scope of relevant laws and regulations, without interfering with the enterprise's daily operations or affecting the user experience of domestic users. Technically, this prevents the enterprise from illegally processing the collected user information and important data, and from transmitting the data and data processing derivatives abroad. This avoids the enterprise itself from abusing, illegally processing, or illegally transmitting the data, as well as the leakage of users' sensitive personal information. It also ensures that user data is not lost after the enterprise goes bankrupt, thereby guaranteeing the security of users' personal information and national security.

[0013] In one optional implementation, the data exchange gateway includes a data gateway server and a data gateway client. The data gateway server is equipped with an external network interface and an internal network interface. Through the data exchange gateway, it obtains data uploaded by the enterprise from a data processing platform, including:

[0014] When it is detected that the enterprise side accesses the data gateway server from the external network interface through the data gateway client, the enterprise side is provided with the function of writing data to the data gateway server.

[0015] When it is detected that the enterprise side accesses the data gateway server from the internal network interface through the data gateway client, the function of reading data from the data gateway server is provided to the enterprise side.

[0016] In this approach, when the enterprise accesses the data gateway server from the external network interface via the data gateway client, it can only write data to the data gateway server, but cannot read data; when the enterprise accesses it through the internal network interface, it can only read data, but cannot write data. Through the data exchange gateway, the enterprise can upload data from the external network interface to the data exchange gateway server, and then download the data from the internal network interface to the data processing platform for use, thus achieving a one-way data inflow capability.

[0017] In one optional implementation, the console includes a console client and a console server, and transmits the desktop screen to the enterprise terminal using the console, including:

[0018] The enterprise client logs into the console server via the console client.

[0019] Using the console server, the desktop screen corresponding to the data processing platform and the process of the data processing platform processing terminal data is transmitted back to the console client;

[0020] The desktop screen is transmitted from the console client to the enterprise.

[0021] In this approach, only mouse and keyboard signals and desktop images are allowed to be transmitted between the console client and the console server, and no other data can be transmitted. Therefore, the enterprise side cannot retrieve the terminal data from the data processing platform, providing an effective method where data is visible but not accessible, which is both convenient and secure.

[0022] In one alternative implementation, the method further includes:

[0023] Using the console server, the desktop screen is created as a desktop video file, and the desktop video file is stored on the console server.

[0024] In this approach, desktop screen data is converted into video files and stored on the server side, thereby recording all operations performed by the enterprise on the desktop of the console server. This enables monitoring of the enterprise's operational behavior without the enterprise being aware of it. The console provides an effective method for making data visible but inaccessible, offering convenience and ensuring security while providing an effective method for monitoring the enterprise's operational behavior.

[0025] Secondly, this application provides a data protection method for use in enterprises, the method comprising:

[0026] Send a data upload request to the third-party resource pool, and send the data processing platform to the third-party resource pool through the data exchange gateway;

[0027] Send a data processing request to a third-party resource pool, access the data processing platform through the desktop screen transmitted by the console, read the terminal data through the data processing platform, process the terminal data, and obtain the target processing result corresponding to the terminal data.

[0028] In this application, the enterprise can only access the data processing platform located in a third-party resource pool through a data exchange gateway. Terminal data stored in the third-party resource pool is processed within that pool; the enterprise cannot download or obtain terminal data. Data collected by the terminals is stored and managed by a trusted third party. The enterprise can only legally access and process data within the third-party managed resource pool under monitored conditions. This ensures, on the one hand, that the enterprise does not have the ability to obtain sensitive personal information, comprehensively protecting user data security; on the other hand, it meets the enterprise's needs for processing terminal data and the normal operation of its business.

[0029] Thirdly, this application provides a data protection method applied to a terminal, the method comprising:

[0030] Collect terminal data and upload it to a third-party resource pool with a preset IP address based on a preset access control policy.

[0031] The system receives filtered target processing results corresponding to terminal data. These results are obtained from the data upload request from the enterprise by a third-party resource pool via a data exchange gateway. In response to the enterprise's data processing request, the system transmits a desktop view to the enterprise via an operator console, enabling the enterprise to access the data processing platform. The system then reads and processes the terminal data through the data processing platform to obtain the target processing result. Finally, the system filters the target processing result using a data scanning system.

[0032] In this application, by restricting the terminal, the data collected by the terminal can only be uploaded to a third-party resource pool with a preset IP address. The terminal and the enterprise cannot communicate directly. The data uploaded by the terminal can only be operated on by the enterprise in the third-party resource pool and cannot be downloaded to the enterprise. The filtering of the data filtering system ensures that the sensitive personal information and important data collected by the terminal will not be obtained by the enterprise. This ensures that the enterprise cannot illegally process the collected user information and important data, and cannot transmit the data and the derivatives of data processing abroad. It avoids the abuse, illegal processing, and illegal transmission of data by the enterprise itself, as well as the leakage of users' sensitive personal information. It also ensures that user data is not lost after the enterprise goes bankrupt, thereby ensuring the security of users' personal information and national security.

[0033] Fourthly, this application provides a data protection system, which includes a terminal, an enterprise terminal, and a third-party resource pool:

[0034] The terminal collects terminal data and uploads it to a third-party resource pool with a preset IP address based on a preset access control policy.

[0035] The enterprise sends a data upload request to the third-party resource pool, and sends the data processing platform to the third-party resource pool through the data exchange gateway; it sends a data processing request to the third-party resource pool, accesses the data processing platform through the desktop screen transmitted by the operation console, reads terminal data through the data processing platform, processes the terminal data, and obtains the target processing result corresponding to the terminal data;

[0036] The third-party resource pool uses a data scanning system to filter the target processing results and pushes the filtered target processing results to the terminal.

[0037] In this application, the data collected by the terminal can only be uploaded to a third-party resource pool with a preset IP address. The data uploaded by the terminal can only be operated on by the enterprise end within the third-party resource pool. By separating the enterprise end and the client end through the third-party resource pool, it is possible to ensure that the enterprise can collect and process data normally within the scope of relevant laws and regulations without affecting the enterprise's daily operations or the user experience of domestic users. Technically, this ensures that the enterprise cannot illegally process the collected user information and important data, and cannot transmit the data and data processing derivatives abroad. This avoids the enterprise itself from abusing, illegally processing, or illegally transmitting the data, as well as the leakage of users' sensitive personal information. It also ensures that user data is not lost after the enterprise goes bankrupt, thereby guaranteeing the security of users' personal information and national security.

[0038] Fifthly, this application provides a computer device, including: a memory and a processor, which are communicatively connected to each other. The memory stores computer instructions, and the processor executes the computer instructions to perform the data protection method of the first aspect or any corresponding embodiment described above, or to perform the data protection method of the second aspect, or to perform the data protection method of the third aspect.

[0039] In a sixth aspect, this application provides a computer-readable storage medium storing computer instructions that cause a computer to perform the data protection method of the first aspect or any corresponding embodiment described above, or to perform the data protection method of the second aspect, or to perform the data protection method of the third aspect.

[0040] In a seventh aspect, this application provides a computer program product, including computer instructions, which are used to cause a computer to execute the data protection method of the first aspect or any corresponding embodiment described above, or to execute the data protection method of the second aspect, or to execute the data protection method of the third aspect.

[0041] The above description is only an overview of the technical solution of this application. In order to better understand the technical means of this application and to implement it in accordance with the contents of the specification, and to make the above and other objects, features and advantages of this application more obvious and understandable, the following are specific embodiments of this application. Attached Figure Description

[0042] To more clearly illustrate the technical solutions in the specific embodiments of this application or the prior art, the drawings used in the description of the specific embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of this application. For those skilled in the art, other drawings can be obtained from these drawings without creative effort.

[0043] Figure 1 is a schematic diagram of the structure of a data protection system according to an embodiment of this application.

[0044] Figure 2 is an interactive schematic diagram of a data protection system according to an embodiment of this application.

[0045] Figure 3 is a schematic diagram of the architecture of a data protection system for smart terminals according to an embodiment of this application.

[0046] Figure 4 is a schematic diagram of terminal data uploading according to an embodiment of this application.

[0047] Figure 5 is a schematic diagram of data transmission of a data exchange gateway according to an embodiment of this application.

[0048] Figure 6 is a schematic diagram of data transmission on an operating console according to an embodiment of this application.

[0049] Figure 7 is a schematic diagram of the structure of a data protection system in an intelligent vehicle application scenario according to an embodiment of this application.

[0050] Figure 8 is a schematic diagram of the hardware structure of a computer device according to an embodiment of this application. Detailed Implementation

[0051] To make the objectives, technical solutions, and advantages of the embodiments of this application clearer, the technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, not all embodiments. Based on the embodiments of this application, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this application.

[0052] The terms "an embodiment," "embodiment," or "one or more embodiments" as used herein mean that a particular feature, structure, or characteristic described in connection with an embodiment is included in at least one embodiment of this application. Furthermore, please note that the examples of the phrase "in one embodiment" do not necessarily all refer to the same embodiment.

[0053] Numerous specific details are set forth in the specification provided herein. However, it will be understood that embodiments of this application may be practiced without these specific details. In some instances, well-known methods, structures, and techniques have not been shown in detail so as not to obscure the understanding of this specification.

[0054] Most related technologies focus on protecting data during data collection, transmission, and access through encryption, authentication, and access control to prevent data leaks. However, they lack effective measures against data misuse, improper processing, unauthorized transmission, and leakage of sensitive user information by the companies collecting the data. For example, Existing technology solution 1, "A Vehicle Data Protection Method, System, Device, and Storage Medium," uses data encryption and blockchain technology to prevent data leakage and tampering during storage and transmission. However, automakers have the ability to arbitrarily process personal data on the vehicle side and arbitrarily use and transmit the processed data, posing a significant data security risk to users' personal data. Existing technology solution 2, "A Data Management Method, Device, Equipment, and Storage Medium," generates access control information based on identity categories and data security levels, and manages this information by establishing an access control information database, achieving efficient control over data permissions and reducing the time cost of data security protection. Similar to solution 1, automakers pose a significant security threat to users' personal data and do not fundamentally protect users' personal data security.

[0055] To address the aforementioned issues, this application provides a data protection system applicable to smart terminal use cases that protect data uploaded by smart terminals. Through this data protection system, data collected by the terminal can only be uploaded to a third-party resource pool with a preset IP address. Data uploaded by the terminal can only be processed by the enterprise end within this third-party resource pool. By separating the enterprise end and the client end through the third-party resource pool, this system ensures that the enterprise can not illegally process collected user information and important data, and cannot transmit data or data processing derivatives abroad, without affecting the enterprise's normal data collection and processing within the bounds of relevant regulations, or disrupting the enterprise's daily operations or impacting the user experience of domestic users. This prevents the enterprise from abusing, illegally processing, or illegally transmitting data, and avoids the leakage of users' sensitive personal information. It also ensures that user data is not lost even after the enterprise goes bankrupt, thereby guaranteeing the security of users' personal information and national security.

[0056] This embodiment provides a data protection system. Figure 1 is a schematic diagram of the structure of the data protection system according to an embodiment of this application. As shown in Figure 1, the system includes a terminal 1, an enterprise terminal 2, and a third-party resource pool 3.

[0057] Figure 2 is an interactive schematic diagram of a data protection system according to an embodiment of this application. As shown in Figure 2, terminal 1 is used to execute step S101, enterprise terminal 2 is used to execute steps S201 to S202, and third-party resource pool is used to execute step S301.

[0058] Step S101: Collect terminal data and upload the terminal data to a third-party resource pool with a preset IP address based on a preset access control policy.

[0059] Step S201: Send a data upload request to the third-party resource pool, and send the data processing platform to the third-party resource pool through the data exchange gateway.

[0060] Step S202: Send a data processing request to the third-party resource pool, access the data processing platform using the desktop screen transmitted by the operation console, read the terminal data through the data processing platform, process the terminal data, and obtain the target processing result corresponding to the terminal data.

[0061] Step S301: Filter the target processing results using the data scanning system and push the filtered target processing results to the terminal.

[0062] In one optional implementation, the data exchange gateway includes a data gateway server and a data gateway client. The data gateway server is equipped with an external network interface and an internal network interface. Through the data exchange gateway, it obtains data uploaded by the enterprise from a data processing platform, including:

[0063] When it is detected that the enterprise side accesses the data gateway server from the external network interface through the data gateway client, the function of writing data to the data gateway server is provided to the enterprise side.

[0064] When it is detected that the enterprise side accesses the data gateway server from the internal network interface through the data gateway client, the function of reading data from the data gateway server is provided to the enterprise side.

[0065] In this approach, when the enterprise accesses the data gateway server from the external network interface via the data gateway client, it is only allowed to write data to the data gateway server, but not to read data; when the enterprise accesses it through the internal network interface, it can only read data, but not write data. Through the data exchange gateway, the enterprise can upload data from the external network interface to the data gateway server, and then download the data from the internal network interface to the data processing platform for use, thus achieving a one-way data inflow capability.

[0066] In one optional implementation, the console includes a console client and a console server, and transmits the desktop screen to the enterprise terminal using the console, including:

[0067] The enterprise client logs into the console server through the console client.

[0068] The console server transmits the desktop screen of the data processing platform and the process of the data processing platform processing the terminal data back to the console client.

[0069] The desktop screen is transmitted from the console client to the enterprise.

[0070] In this approach, only mouse and keyboard signals and desktop images are allowed to be transmitted between the console client and the console server, and no other data can be transmitted. Therefore, the enterprise side cannot retrieve the terminal data from the data processing platform, providing an effective method where data is visible but not accessible, which is both convenient and secure.

[0071] In one optional implementation, the method further includes: using a console server to create a desktop video file from the desktop screen, and storing the desktop video file on the console server.

[0072] In this approach, desktop screen data is converted into video files and stored on the server side, thereby recording all operations performed by the enterprise on the desktop of the console server. This enables monitoring of the enterprise's operational behavior without the enterprise being aware of it. The console provides an effective method for making data visible but inaccessible, offering convenience and ensuring security while providing an effective method for monitoring the enterprise's operational behavior.

[0073] In one example, Figure 3 is a schematic diagram of the architecture of a data protection system for smart terminals according to an embodiment of this application. As shown in Figure 3, the data protection system for smart terminals includes six parts: terminal, data processing platform, resource pool, data exchange gateway, operation console, and data scanning system.

[0074] 1. Terminal: When the terminal is sold to the customer, it will have a built-in data card. The data card is strictly restricted to the IP addresses or domain names that can be accessed. Figure 4 is a schematic diagram of terminal data upload according to an embodiment of this application. As shown in Figure 4, the data collected by the terminal can only be uploaded to the resource pool of the specified IP address. The terminal and the enterprise cannot communicate directly.

[0075] II. Data Processing Platform. A data processing platform is a system comprised of hardware and software, typically provided by the enterprise, to fulfill its needs for data access, processing, and management. It is deployed within a resource pool provided by a neutral operator.

[0076] III. Resource Pool. The resource pool is a dedicated cloud provided by a neutral operator, offering both storage and computing capabilities. It employs 3Availability Zones Dedicated Cloud Resource Pool (3AZ) high availability technology to guarantee at least 99.95% service availability and at least 99.99999999999% (13 nines) data reliability. Furthermore, the data is hardware encrypted to ensure data security.

[0077] IV. Data Exchange Gateway. A data exchange gateway is a system designed to facilitate the transfer of data from external sources to a resource pool within an enterprise. It consists of a data gateway client and a data gateway server. Figure 5 is a schematic diagram of data transmission using a data exchange gateway according to an embodiment of this application. As shown in Figure 5, the enterprise end uploads and downloads data through the data gateway client. The data gateway server has two types of network interfaces: an external network interface and an internal network interface. When the enterprise end accesses the data gateway server through the external network interface via the data gateway client, it can only write data to the data gateway server, but cannot read data; when the enterprise end accesses the data gateway server through the internal network interface, it can only read data, but cannot write data. Through the data exchange gateway, enterprises can upload data (including programs) from the external network interface to the data gateway server, and then download the data (including programs) from the internal network interface to the data processing platform for use, thus achieving a one-way data inflow capability.

[0078] V. Control Panel. The control panel is a system that facilitates remote operation of the data processing platform by enterprises. This system consists of a client and a server, namely the control panel client and the control panel server. Figure 6 is a schematic diagram of data transmission on a control panel according to an embodiment of this application. As shown in Figure 6, the control panel client is software that can run on various mainstream operating systems, such as Windows, Mac, Linux, and Android. The control panel server runs many desktop operating systems (hereinafter referred to as desktops), such as Windows and Linux. When the enterprise needs to remotely operate the data processing platform within the resource pool, it needs to log in to the desktop of the control panel server using the control panel client, and then use the desktop of the control panel server as a springboard to access the data processing platform within the resource pool. Since only mouse and keyboard signals and the desktop screen are transmitted between the control panel client and the control panel server, and no other data is transmitted, the enterprise cannot download data from the data processing platform. In addition, while transmitting the desktop screen back to the control panel client, the control panel server also creates a video file from the desktop screen data and stores it on the control panel server. This records all operations performed by the enterprise on the console server, enabling monitoring of enterprise-side operations without the enterprise's knowledge. In summary, the console provides an effective method for "data visible but not accessible," offering convenience, ensuring security, and providing a monitoring method.

[0079] VI. Data Scanning System. This system parses and scans data traffic between terminals and the data processing platform to determine data legitimacy. It strictly restricts data flowing out of the data processing platform, allowing only legitimate data required for terminal software operation to exit. To enable the data scanning system to "understand" the data, the enterprise must provide the system's operator with a data communication protocol. The resource pool first checks the protocol's legitimacy and then designs scanning rules based on it. During normal operation, when the data scanning system detects data flowing out that does not conform to the rules, it will block it, preventing illegal data from leaking. This ensures both the normal operation of the enterprise's business and prevents the leakage of illegal data.

[0080] Specifically, the data collection, storage, and processing flow is as follows: First, the smart terminal collects data and uploads it to the resource pool operated by the neutral operator via the built-in data SIM card for storage; second, the enterprise uploads its own data processing platform to the resource pool through the data exchange gateway, and remotely logs into the resource pool through the console to complete the deployment, operation, and maintenance of the data processing platform in the resource pool; finally, the data processing platform reads the terminal data stored in the resource pool for processing.

[0081] The interaction process between smart terminals and enterprises is as follows: First, smart terminals cannot communicate directly with enterprises or transmit data directly. Second, there are two scenarios where data transmission between smart terminals and enterprises is necessary: ​​one is when the smart terminal's software needs an update; the other is when the results of data processing by the data processing platform need to be pushed to the smart terminal. For the first scenario, the enterprise first needs to upload the software update package to the resource pool through the data exchange gateway and then copy the software update package to the data processing platform through the operation console. Next, the processing method is the same for both scenarios: the data processing platform pushes the data or software package to the smart terminal after scanning it through the data scanning system. The scanning rules of the data scanning system are designed based on the data communication protocol provided by the enterprise; only data or software packages that conform to the scanning rules can be transmitted out of the resource pool.

[0082] In one implementation scenario, Figure 7 is a schematic diagram of the structure of a data protection system in an intelligent vehicle application scenario according to an embodiment of this application. As shown in Figure 7, in this embodiment, the terminal is an intelligent vehicle; the resource pool is a 3AZ dedicated cloud resource pool built across three data centers, which provides both object storage supporting the S3 protocol and elastic and scalable computing capabilities; the data exchange gateway is a File Transfer Protocol Server (FTP) server, which provides data upload services; the operation console is a cloud computer, and the enterprise terminal operates the data processing platform in the dedicated cloud resource pool through the cloud computer, as shown in Figure 5.

[0083] The vehicle terminal collects user data within the cabin, vehicle driving status data, and external environmental data. Based on certain policies, it uses a built-in data SIM card to call the Simple Storage Service (S3) protocol interface to upload this data to a dedicated cloud operated by a neutral operator. Each vehicle has a built-in data SIM card at the factory. This data SIM card is configured with access control policies by the neutral operator through its core network capabilities, restricting access to only the dedicated cloud and other designated preset IP addresses or domain names. In other words, the data collected by the vehicle terminal can only be uploaded to the dedicated cloud resource pool storage system and cannot be uploaded to the vehicle manufacturer; the vehicle terminal is restricted from direct communication with the vehicle manufacturer.

[0084] The dedicated cloud resource pool operated by the neutral operator provides both storage and computing capabilities. It adopts 3AZ high availability technology to ensure service availability of no less than 99.95% and data reliability of no less than 99.99999999999% (13 nines). The data is also hardware encrypted to ensure data security.

[0085] The enterprise first uploads its data processing platform to a dedicated cloud resource pool via an FTP server. Then, it logs into the resource pool via a cloud computer and deploys the data processing platform on dedicated computing hardware within the pool. The data processing platform then reads and analyzes the terminal data stored in the resource pool.

[0086] All operations performed by the enterprise on the local terminal of the cloud computer within the resource pool are recorded without the enterprise's knowledge. This not only standardizes the enterprise's behavior and prevents violations such as data leaks, but also allows the operation records to serve as evidence for post-event review, ensuring traceability and accountability.

[0087] The data processing platform processes the data generated by the vehicle-side data. After being scanned and filtered by the data scanning system, the results are pushed to the vehicle to complete the vehicle software upgrade. The filtering rules of the data scanning system are set according to the data communication protocol between the vehicle and the data processing platform provided by the automaker. Only data that conforms to these rules can flow out of the resource pool; otherwise, it will be blocked to prevent the leakage of sensitive user information and other important information. Similarly, since direct communication between the vehicle and the automaker is prohibited, when the automaker needs to upgrade the vehicle software, it must first upload the software upgrade package to the data processing platform through the data exchange gateway, and then push it to the vehicle after being filtered by the data scanning system.

[0088] The data protection system provided in this embodiment allows data collected by terminals to be uploaded only to a third-party resource pool with a specified IP address. Data uploaded by terminals can only be processed by the enterprise side within this third-party resource pool. By separating the enterprise side and the client side through the third-party resource pool, the system ensures that enterprises can collect and process data normally within the limits of relevant regulations, without interfering with their daily operations or affecting the user experience of domestic users. Technically, this prevents enterprises from illegally processing collected user information and important data, and from transmitting data and its derivatives abroad. This avoids the misuse, illegal processing, and illegal transmission of data by the data-collecting enterprise itself, as well as the leakage of users' sensitive personal information. It also ensures that user data is not lost even after the enterprise goes bankrupt, thereby protecting users' personal information security and national security.

[0089] The device embodiments described above are merely illustrative. The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the modules can be selected to achieve the purpose of this embodiment according to actual needs. Those skilled in the art can understand and implement this without any creative effort.

[0090] The various component embodiments of this application can be implemented in hardware, or as software modules running on one or more processors, or a combination thereof. Those skilled in the art will understand that microprocessors or digital signal processors (DSPs) can be used in practice to implement some or all of the functions of some or all of the components in the computing processing device according to the embodiments of this application. This application can also be implemented as a device or apparatus program (e.g., a computer program and computer program product) for performing part or all of the methods described herein. Such an implementation of this application can be stored on a computer-readable medium, or can be in the form of one or more signals. Such signals can be downloaded from an Internet website, provided on a carrier signal, or provided in any other form.

[0091] This application also provides a computer device. Referring to Figure 8, which is a schematic diagram of the structure of a computer device according to an optional embodiment of this application, the computer device includes one or more processors 10, a memory 20, and interfaces for connecting the various components, including high-speed interfaces and low-speed interfaces. The various components communicate with each other using different buses and can be installed on a common motherboard or otherwise as needed. The processor can process instructions executed within the computer device, including instructions stored in or on memory to display graphical information of a GUI on an external input / output device (such as a display device coupled to the interface). In some optional embodiments, multiple processors and / or multiple buses can be used with multiple memories and multiple memory modules, if desired. Similarly, multiple computer devices can be connected, each providing some of the necessary operations (e.g., as a server array, a group of blade servers, or a multiprocessor system). Figure 8 uses one processor 10 as an example.

[0092] Processor 10 may be a central processing unit, a network processor, or a combination thereof. Processor 10 may further include a hardware chip. The hardware chip may be an application-specific integrated circuit (ASIC), a programmable logic device (PLD), or a combination thereof. The programmable logic device may be a complex programmable logic device (CAMP), a field-programmable gate array (FPGA), a general-purpose array logic (GDA), or any combination thereof.

[0093] The memory 20 stores instructions executable by at least one processor 10 to cause the at least one processor 10 to perform the method shown in the above embodiments.

[0094] The memory 20 may include a program storage area and a data storage area. The program storage area may store the operating system and applications required for at least one function; the data storage area may store data created based on the use of the computer device. Furthermore, the memory 20 may include high-speed random access memory and may also include non-transitory memory, such as at least one disk storage device, flash memory device, or other non-transitory solid-state storage device. In some alternative embodiments, the memory 20 may optionally include memory remotely located relative to the processor 10, and these remote memories may be connected to the computer device via a network. Examples of such networks include, but are not limited to, the Internet, intranets, local area networks, mobile communication networks, and combinations thereof.

[0095] The memory 20 may include volatile memory, such as random access memory; the memory may also include non-volatile memory, such as flash memory, hard disk or solid-state drive; the memory 20 may also include a combination of the above types of memory.

[0096] The computer device also includes an input device 30 and an output device 40. The processor 10, memory 20, input device 30 and output device 40 can be connected via a bus or other means, as shown in Figure 8, which illustrates a connection via a bus.

[0097] Input device 30 can receive input numerical or character information, and generate key signal inputs related to user settings and function control of the computer device, such as a touchscreen, keypad, mouse, trackpad, touchpad, joystick, one or more mouse buttons, trackball, joystick, etc. Output device 40 may include display devices, auxiliary lighting devices (e.g., LEDs), and haptic feedback devices (e.g., vibration motors). The aforementioned display devices include, but are not limited to, liquid crystal displays, light-emitting diodes, displays, and plasma displays. In some alternative embodiments, the display device may be a touchscreen.

[0098] This application also provides a computer-readable storage medium. The methods described in this application can be implemented in hardware or firmware, or implemented as recordable on a storage medium, or implemented as computer code downloaded over a network and originally stored on a remote storage medium or a non-transitory machine-readable storage medium and subsequently stored on a local storage medium. Thus, the methods described herein can be processed by software stored on a storage medium using a general-purpose computer, a dedicated processor, or programmable or dedicated hardware. The storage medium can be a magnetic disk, optical disk, read-only memory, random access memory, flash memory, hard disk, or solid-state drive, etc.; further, the storage medium may also include combinations of the above types of memory. It is understood that computers, processors, microprocessor controllers, or programmable hardware include storage components capable of storing or receiving software or computer code. When the software or computer code is accessed and executed by the computer, processor, or hardware, the methods shown in the above embodiments are implemented.

[0099] A portion of this application can be applied as a computer program product, such as computer program instructions, which, when executed by a computer, can invoke or provide the methods and / or technical solutions according to this application through the operation of the computer. Those skilled in the art will understand that the forms in which computer program instructions exist in a computer-readable medium include, but are not limited to, source files, executable files, installation package files, etc. Correspondingly, the ways in which computer program instructions are executed by a computer include, but are not limited to: the computer directly executing the instructions, or the computer compiling the instructions and then executing the corresponding compiled program, or the computer reading and executing the instructions, or the computer reading and installing the instructions and then executing the corresponding installed program. Here, the computer-readable medium can be any available computer-readable storage medium or communication medium accessible to a computer.

[0100] Although embodiments of this application have been described in conjunction with the accompanying drawings, those skilled in the art can make various modifications and variations without departing from the spirit and scope of this application, and all such modifications and variations fall within the scope defined by the appended claims.

[0101] In the claims, any reference signs placed between parentheses should not be construed as limiting the claims. The word "comprising" does not exclude the presence of elements or steps not listed in the claims. The word "a" or "an" preceding an element does not exclude the presence of a plurality of such elements. This application can be implemented by means of hardware comprising several different elements and by means of a suitably programmed computer. In a unit claim enumerating several means, several of these means may be embodied by the same item of hardware. The use of the words first, second, and third, etc., does not indicate any order. These words can be interpreted as names.

[0102] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of this application, and are not intended to limit them. Although this application has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some of the technical features. Such modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of this application.

Claims

1. A data protection method, characterized by, Applied to a third-party resource pool, the method includes: Acquire terminal data collected and uploaded by the terminal, and store the terminal data in a preset IP address; In response to a data upload request from the enterprise, the data processing platform uploaded by the enterprise is obtained through the data exchange gateway; In response to the data processing request from the enterprise, a desktop screen is transmitted to the enterprise via an operating console, so that the enterprise can access the data processing platform through the desktop screen, read the terminal data through the data processing platform, process the terminal data, and obtain the target processing result corresponding to the terminal data. The target processing results are filtered using a data scanning system, and the filtered target processing results are pushed to the terminal.

2. The method of claim 1, wherein, The data exchange gateway includes a data gateway server and a data gateway client. The data gateway server is equipped with an external network interface and an internal network interface. The process of obtaining data uploaded by the enterprise through the data exchange gateway includes: When it is detected that the enterprise terminal accesses the data gateway server through the external network interface via the data gateway client, the enterprise terminal is provided with the function of writing data to the data gateway server. When it is detected that the enterprise terminal accesses the data gateway server through the data gateway client from the intranet interface, the enterprise terminal is provided with the function of reading data from the data gateway server.

3. The method of claim 1, wherein, The control panel includes a client and a server. The step of transmitting the desktop screen to the enterprise terminal using the control panel includes: The enterprise terminal is logged into the console server through the console client. Using the console server, the desktop screen corresponding to the data processing platform and the process of the data processing platform processing the terminal data is transmitted back to the console client; The desktop screen is transmitted from the console client to the enterprise terminal.

4. The method of claim 3, wherein, The method further includes: Using the console server, the desktop screen is created as a desktop video file, and the desktop video file is stored on the console server.

5. A data protection method, characterized by, When applied to enterprise settings, the method includes: Send a data upload request to the third-party resource pool, and send the data processing platform to the third-party resource pool through the data exchange gateway; A data processing request is sent to the third-party resource pool. The desktop screen transmitted by the operation console is used to access the data processing platform. The terminal data is read through the data processing platform, processed, and the target processing result corresponding to the terminal data is obtained.

6. A data protection method, characterized by, Applied to a terminal, the method includes: Collect terminal data and, based on a preset access control policy, upload the terminal data to a third-party resource pool with a preset IP address; The system receives the filtered target processing result corresponding to the terminal data. The filtered target processing result is obtained by the third-party resource pool in response to the enterprise's data upload request, through a data exchange gateway, by acquiring the data processing platform uploaded by the enterprise; in response to the enterprise's data processing request, the system transmits a desktop screen to the enterprise via an operation console, enabling the enterprise to access the data processing platform through the desktop screen; the system reads the terminal data through the data processing platform, processes the terminal data, and obtains the target processing result corresponding to the terminal data; and the system filters the target processing result using a data scanning system.

7. A data protection system, characterized by The system includes terminals, enterprise terminals, and a third-party resource pool: The terminal collects terminal data and uploads the terminal data to a third-party resource pool with a preset IP address based on a preset access control policy. The enterprise sends a data upload request to the third-party resource pool and sends the data processing platform to the third-party resource pool through the data exchange gateway; it sends a data processing request to the third-party resource pool, accesses the data processing platform through the desktop screen transmitted by the operation console, reads the terminal data through the data processing platform, processes the terminal data, and obtains the target processing result corresponding to the terminal data. The third-party resource pool uses a data scanning system to filter the target processing results and pushes the filtered target processing results to the terminal.

8. A computer device, comprising: include: A memory and a processor are communicatively connected, the memory stores computer instructions, and the processor executes the computer instructions to perform the data protection method of any one of claims 1 to 6.

9. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores computer instructions for causing a computer to perform the data protection method according to any one of claims 1 to 6.

10. A computer program product, characterised in that, Includes computer instructions for causing a computer to perform the data protection method according to any one of claims 1 to 6.

Images